Merge pull request #85 from overleaf/jpa-sanitize-worker-input

[AspellWorker] sanitize user input before writing it to the worker pipe

services/spelling/app/js/ASpellWorker.js

@@ -233,6 +233,8 @@ class ASpellWorker {
   }
 
   sendCommand(command) {
+    // Sanitize user input. Reject line feed characters.
+    command = command.replace(/[\r\n]/g, '')
     return this.pipe.stdin.write(command + '\n')
   }
 }