Fix null byte ArgumentError in results API

app/controllers/api/results_controller.rb

@@ -1,6 +1,7 @@
 module API
   class ResultsController < BaseController
     before_action :authenticate_api_key!
+    before_action :sanitize_result_params!, only: :create
 
     def create
       @rails_release = RailsRelease.find_by(version: params[:rails_version])
@@ -22,6 +23,15 @@ def create
 
     private
 
+    def sanitize_result_params!
+      if params[:result].is_a?(ActionController::Parameters)
+        params[:result].each_key do |key|
+          value = params[:result][key]
+          params[:result][key] = value.delete("\x00") if value.is_a?(String)
+        end
+      end
+    end
+
     def authenticate_api_key!
       api_key = request.headers['RAILS-BUMP-API-KEY']
 

spec/controllers/api/results_controller_spec.rb

@@ -73,6 +73,26 @@
       end
     end
 
+    context "when result params contain null bytes" do
+      it "strips null bytes and processes successfully" do
+        request.headers.merge!(headers)
+
+        post :create, params: {
+          rails_version: rails_release.version,
+          compat_id: compat.id,
+          dependencies: compat.dependencies,
+          result: {
+            success: true,
+            strategy: "some_strategy",
+            output: "some output\x00with null bytes"
+          }
+        }
+
+        expect(response).to have_http_status(:ok)
+        expect(compat.reload.status).to eq("compatible")
+      end
+    end
+
     context "if result processing fails" do
       it "returns unprocessable entity" do
         allow_any_instance_of(Compat).to receive(:process_result).and_return(false)