sanitize notes updates for invalid characters before persisting to database

services/capability/capability/views/capability_version.py

@@ -21,6 +21,7 @@ File containing definitions for the capability version routes of the Workspaces
 
 import copy
 import http
+import json
 import logging
 
 import requests
@@ -165,7 +166,10 @@ def update_da_notes(request: Request) -> Response:
     capability_request_id = request.matchdict["capability_request_id"]
     version_id = request.matchdict["version_id"]
     params = request.json_body
-    new_notes = params["edits"]
+    # sanitize input before writing/persisting
+    # \\u0000 is an invalid character that is incompatible with postgres json columns
+    # from StackOverflow: https://stackoverflow.com/questions/63092267/how-to-handle-api-responsesjson-containing-x00-or-u0000-in-its-data-and-s
+    new_notes = json.loads(json.dumps(params["edits"])).replace("\\u0000", "")
 
     capability_request = request.capability_info.lookup_capability_request(capability_request_id)
     if capability_request: