farmbot_os/farmbot_celery_script/lib/farmbot_celery_script/compiler/identifier_sanitizer.ex

defmodule FarmbotCeleryScript.Compiler.IdentifierSanitizer do
  @moduledoc """
  Responsible for ensuring variable names in Sequences are clean.
  This is done because identifiers are `unquote`d and the user controls
  the data inside them. To prevent things like
  `"System.cmd("rm -rf /*/**")"` being evaluated, all identifiers
  are sanitized by prepending a token and hashing the value.
  """

  @token "unsafe_"

  @doc """
  Takes an unsafe string, and returns a safe variable name.
  """
  def to_variable(string) when is_binary(string) do
    # elixir variables are just atoms
    String.to_atom(@token <> Base.url_encode64(string, padding: false))
  end

  @doc "Takes an encoded safe variable name and returns the original unsafe string."
  def to_string(<<@token <> encoded>>) do
    Base.url_decode64!(encoded, padding: false)
  end
end