news-analyze/server/api/fetcharticle/[slug].ts

import sql from "~/server/components/postgres";
export default defineEventHandler(async (event) => {
    const slug = getRouterParam(event, 'slug');
    
    // Validate and sanitize the slug
    if (!slug || typeof slug !== 'string') {
        throw createError({
            statusCode: 400,
            message: 'Invalid slug parameter'
        });
    }
    const cleanSlug = slug.replace(/[^a-zA-Z0-9-_]/g, '');

    try {
        const result = await sql`
         select * from articles
         where slug = ${cleanSlug}
        `
        
        return result.rows[0] || null;
    } catch (error) {
        console.error('Database error:', error);
        throw createError({
            statusCode: 500,
            message: 'Internal server error'
        });
    }
});