news-analyze/server/api/fetcharticle/[slug].ts

import sql from "~/server/components/postgres";
export default defineEventHandler(async (event) => {
  const slug = getRouterParam(event, "slug");

  // Validate and sanitize the slug
  if (!slug || typeof slug !== "string") {
    throw createError({
      statusCode: 400,
      message: "Invalid slug parameter",
    });
  }
  const cleanSlug = slug.replace(/[^a-zA-Z0-9-_]/g, "");

  try {
    const result = await sql`
         select * from articles
         where slug = ${cleanSlug}
        `;

    return result.rows[0] || null;
  } catch (error) {
    console.error("Database error:", error);
    throw createError({
      statusCode: 500,
      message: "Internal server error",
    });
  }
});