fix: validate and allowlist language before prompt injection

README.md

@@ -33,7 +33,7 @@ ReadmeGenAI eliminates this friction by leveraging advanced AI to automatically
   <img src="assets/mainpage.png" alt="Main Page" width="600"/>
   <br>
   <br>
-  <img src="assets/fearture-page.png" alt="Feature Page" width="600"/>
+  <img src="assets/feature-page.png" alt="Feature Page" width="600"/>
 </p>
 
 ## Technical Architecture

src/app/api/generate/route.ts

@@ -1,7 +1,7 @@
 import { NextResponse } from "next/server";
 import { getGeminiModel } from "@/lib/gemini";
 import { getRepoData, getRepoContents } from "@/lib/octokit";
 import { SUPPORTED_LANGUAGES } from "@/constants/languages";
 
 export const dynamic = "force-dynamic";
 
@@ -157,9 +157,12 @@
 
     const result = await model.generateContent(prompt);
     const response = await result.response;
-    const markdown = response.text();
+    const markdown = response.text().trim();
+    const cleanMarkdown = markdown
+      .replace(/^```(markdown|md)?\n/, "")
+      .replace(/\n```$/, "");
 
-    return NextResponse.json({ markdown });
+    return NextResponse.json({ markdown: cleanMarkdown });
   } catch (error: unknown) {
     const message =
       error instanceof Error ? error.message : "Internal Server Error";

src/lib/gemini.ts

@@ -19,7 +19,7 @@ export function getGeminiModel(): GenerativeModel {
   const genAI = new GoogleGenerativeAI(apiKey);
 
   _model = genAI.getGenerativeModel({
-    model: "gemini-2.5-flash",
+    model: "gemini-1.5-flash",
     safetySettings: [
       {
         category: HarmCategory.HARM_CATEGORY_HARASSMENT,