Sanitize open-error message prefixes

Co-authored-by: Shri Sukhani <shrisukhani@users.noreply.github.com>

Author: cursoragent

hyperbrowser/client/file_utils.py

@@ -50,7 +50,11 @@ def build_open_file_error_message(file_path: object, *, prefix: str) -> str:
         normalized_prefix = _DEFAULT_OPEN_ERROR_MESSAGE_PREFIX
     else:
         try:
-            stripped_prefix = normalized_prefix.strip()
+            sanitized_prefix = "".join(
+                "?" if ord(character) < 32 or ord(character) == 127 else character
+                for character in normalized_prefix
+            )
+            stripped_prefix = sanitized_prefix.strip()
         except Exception:
             stripped_prefix = _DEFAULT_OPEN_ERROR_MESSAGE_PREFIX
         if not is_plain_string(stripped_prefix) or not stripped_prefix:

tests/test_file_utils.py

@@ -349,6 +349,15 @@ def test_build_open_file_error_message_uses_default_prefix_for_blank_string():
     assert message == "Failed to open file at path: /tmp/path.txt"
 
 
+def test_build_open_file_error_message_sanitizes_control_chars_in_prefix():
+    message = build_open_file_error_message(
+        "/tmp/path.txt",
+        prefix="Failed\topen",
+    )
+
+    assert message == "Failed?open: /tmp/path.txt"
+
+
 def test_ensure_existing_file_path_wraps_invalid_path_os_errors(monkeypatch):
     def raising_exists(path: str) -> bool:
         raise OSError("invalid path")