Merge pull request #650 from topcoder-platform/feature/PLAT3368

fix: sanitized data

Author: eisbilir

src/services/ChallengeService.js

@@ -1165,9 +1165,11 @@ createChallenge.schema = {
       tags: Joi.array().items(Joi.string()), // tag names
       projectId: Joi.number().integer().positive(),
       legacyId: Joi.number().integer().positive(),
-      constraints: Joi.object().keys({
-        allowedRegistrants: Joi.array().items(Joi.string()).optional()
-      }).optional(),
+      constraints: Joi.object()
+        .keys({
+          allowedRegistrants: Joi.array().items(Joi.string()).optional(),
+        })
+        .optional(),
       startDate: Joi.date().iso(),
       status: Joi.string().valid([
         constants.challengeStatuses.Active,
@@ -1994,9 +1996,11 @@ updateChallenge.schema = {
       tags: Joi.array().items(Joi.string().required()).min(1), // tag names
       projectId: Joi.number().integer().positive(),
       legacyId: Joi.number().integer().positive(),
-      constraints: Joi.object().keys({
-        allowedRegistrants: Joi.array().items(Joi.string()).optional()
-      }).optional(),
+      constraints: Joi.object()
+        .keys({
+          allowedRegistrants: Joi.array().items(Joi.string()).optional(),
+        })
+        .optional(),
       status: Joi.string().valid(_.values(constants.challengeStatuses)),
       attachments: Joi.array().items(
         Joi.object().keys({
@@ -2084,6 +2088,7 @@ function sanitizeChallenge(challenge) {
     "task",
     "groups",
     "cancelReason",
+    "constraints",
   ]);
   if (!_.isUndefined(sanitized.name)) {
     sanitized.name = xss(sanitized.name);