infra[patch]: Sanitize body in spam filter

[AdnaneKhan]

Good to sanitize the comment - otherwise the spammer could quite literally do much worse than spam the repository.

My tool picked this up on a nightly scan I run (just running on the repo here):

 .d8888b.         d8888 88888888888  .d88888b.         Y88b   d88P
d88P  Y88b       d88888     888     d88P" "Y88b         Y88b d88P
888    888      d88P888     888     888     888          Y88o88P
888            d88P 888     888     888     888           Y888P
888  88888    d88P  888     888     888     888           d888b
888    888   d88P   888     888     888     888 888888   d88888b
Y88b  d88P  d8888888888     888     Y88b. .d88P         d88P Y88b
 "Y8888P88 d88P     888     888      "Y88888P"         d88P   Y88b

    By @adnanthekhan - github.com/AdnaneKhan/gato-x


[+] The authenticated user is: AdnaneKhan
[+] The GitHub Classic PAT has the following scopes: gist, read:org, repo, workflow
[+] Querying and caching workflow YAML files from 1 repositories!
    - Enumerating: langchain-ai/langchainjs!
|==============================================================================|
| Repository Name: langchain-ai/langchainjs                                    |
| Report Type: Actions Script Injection                                        |
|------------------------------------------------------------------------------|
| Workflow Name: spam-comment-filter.yml                                       |
| Issue Type: Actions Injection                                                |
| Trigger(s): issue_comment                                                    |
| Details: The workflow uses variables by context expression within run or     |
| script steps. If the step is reachable and the variables are user controlled,|
| then they can be used to inject arbitrary code into the workflow.            |
| Workflow URL: https://github.com/langchain-                                  |
| ai/langchainjs/blob/main/.github/workflows/spam-comment-filter.yml           |
| Confidence: HIGH                                                             |
|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
| Job: filter_spam                                                             |
| Step: Check issue body against regex                                         |
| Variables: github.event.comment.body                                         |
|==============================================================================|

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
langchainjs-docs	✅ Ready (Inspect)	Visit Preview		Aug 27, 2024 0:28am

1 Skipped Deployment

Name	Status	Preview	Comments	Updated (UTC)
langchainjs-api-refs	⬜️ Ignored (Inspect)			Aug 27, 2024 0:28am

[bracesproul]

Thank you for this!