Sanitize control characters in operation-name prefixes

Co-authored-by: Shri Sukhani <shrisukhani@users.noreply.github.com>

Author: cursoragent

hyperbrowser/client/polling.py

@@ -78,6 +78,10 @@ def _validate_operation_name(operation_name: str) -> None:
 
 def build_operation_name(prefix: object, identifier: object) -> str:
     normalized_prefix = _coerce_operation_name_component(prefix, fallback="")
+    normalized_prefix = "".join(
+        "?" if ord(character) < 32 or ord(character) == 127 else character
+        for character in normalized_prefix
+    )
     raw_identifier = _coerce_operation_name_component(identifier, fallback="unknown")
     normalized_identifier = raw_identifier.strip()
     if not normalized_identifier:

tests/test_polling.py

@@ -118,6 +118,15 @@ def __str__(self) -> str:
     assert operation_name == "identifier"
 
 
+def test_build_operation_name_sanitizes_control_characters_in_prefix():
+    operation_name = build_operation_name(
+        "crawl\njob\t ",
+        "identifier",
+    )
+
+    assert operation_name == "crawl?job? identifier"
+
+
 def test_poll_until_terminal_status_allows_immediate_terminal_on_zero_max_wait():
     status = poll_until_terminal_status(
         operation_name="sync immediate zero wait",