From 1ee79d43de95f70ca2a97de3092491081994a1af Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Fri, 4 Sep 2026 11:15:34 +0200
Subject: [PATCH] Limit length for comment, search query and symbol

---
 .../app/endpoints/asset-profiles/get-asset-profiles.dto.ts | 7 +++++--
 .../create-or-update-activity-dialog.component.ts          | 4 +---
 .../create-or-update-activity-dialog.html                  | 6 +-----
 libs/common/src/lib/dtos/create-asset-profile.dto.ts       | 6 +++++-
 libs/common/src/lib/dtos/create-watchlist-item.dto.ts      | 5 ++++-
 libs/common/src/lib/dtos/update-asset-profile.dto.ts       | 6 +++++-
 6 files changed, 21 insertions(+), 13 deletions(-)

diff --git a/apps/api/src/app/endpoints/asset-profiles/get-asset-profiles.dto.ts b/apps/api/src/app/endpoints/asset-profiles/get-asset-profiles.dto.ts
index 77696c7795..562a753918 100644
--- a/apps/api/src/app/endpoints/asset-profiles/get-asset-profiles.dto.ts
+++ b/apps/api/src/app/endpoints/asset-profiles/get-asset-profiles.dto.ts
@@ -43,8 +43,11 @@ export class GetAssetProfilesDto {
   skip?: number;
 
   @IsIn([
-    ...Object.values(Prisma.SymbolProfileScalarFieldEnum),
-    'activitiesCount'
+    'activitiesCount',
+    'assetClass',
+    'assetSubClass',
+    'dataSource',
+    'symbol'
   ])
   @IsOptional()
   sortColumn?: string;
diff --git a/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.component.ts b/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.component.ts
index 1675933f96..853787f804 100644
--- a/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.component.ts
+++ b/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.component.ts
@@ -3,8 +3,7 @@ import { UserService } from '@ghostfolio/client/services/user/user.service';
 import {
   ASSET_CLASS_MAPPING,
   COMMENT_MAXIMUM_LENGTH,
-  DEFAULT_LOCALE,
-  SYMBOL_MAXIMUM_LENGTH
+  DEFAULT_LOCALE
 } from '@ghostfolio/common/config';
 import { CreateOrderDto, UpdateOrderDto } from '@ghostfolio/common/dtos';
 import {
@@ -86,7 +85,6 @@ import { ActivityType } from './types/activity-type.type';
 export class GfCreateOrUpdateActivityDialogComponent {
   protected readonly COMMENT_MAXIMUM_LENGTH = COMMENT_MAXIMUM_LENGTH;
   protected readonly DEFAULT_LOCALE = DEFAULT_LOCALE;
-  protected readonly SYMBOL_MAXIMUM_LENGTH = SYMBOL_MAXIMUM_LENGTH;
 
   protected activityForm: FormGroup;
 
diff --git a/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.html b/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.html
index bfc330a36b..f9494efdc2 100644
--- a/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.html
+++ b/apps/client/src/app/pages/portfolio/activities/create-or-update-activity-dialog/create-or-update-activity-dialog.html
@@ -114,11 +114,7 @@
     >
       <mat-form-field appearance="outline" class="w-100">
         <mat-label i18n>Name</mat-label>
-        <input
-          formControlName="name"
-          matInput
-          [maxlength]="SYMBOL_MAXIMUM_LENGTH"
-        />
+        <input formControlName="name" matInput />
       </mat-form-field>
     </div>
     <div class="d-none">
diff --git a/libs/common/src/lib/dtos/create-asset-profile.dto.ts b/libs/common/src/lib/dtos/create-asset-profile.dto.ts
index 9a7eb6e6c2..4197137fb3 100644
--- a/libs/common/src/lib/dtos/create-asset-profile.dto.ts
+++ b/libs/common/src/lib/dtos/create-asset-profile.dto.ts
@@ -1,4 +1,7 @@
-import { COMMENT_MAXIMUM_LENGTH } from '@ghostfolio/common/config';
+import {
+  COMMENT_MAXIMUM_LENGTH,
+  SYMBOL_MAXIMUM_LENGTH
+} from '@ghostfolio/common/config';
 import { IsCurrencyCode } from '@ghostfolio/common/validators/is-currency-code';
 
 import { AssetClass, AssetSubClass, DataSource, Prisma } from '@prisma/client';
@@ -85,6 +88,7 @@ export class CreateAssetProfileDto {
   sectors?: Prisma.InputJsonArray;
 
   @IsString()
+  @MaxLength(SYMBOL_MAXIMUM_LENGTH)
   symbol: string;
 
   @IsOptional()
diff --git a/libs/common/src/lib/dtos/create-watchlist-item.dto.ts b/libs/common/src/lib/dtos/create-watchlist-item.dto.ts
index 663965ef1d..78808a0246 100644
--- a/libs/common/src/lib/dtos/create-watchlist-item.dto.ts
+++ b/libs/common/src/lib/dtos/create-watchlist-item.dto.ts
@@ -1,10 +1,13 @@
+import { SYMBOL_MAXIMUM_LENGTH } from '@ghostfolio/common/config';
+
 import { DataSource } from '@prisma/client';
-import { IsEnum, IsString } from 'class-validator';
+import { IsEnum, IsString, MaxLength } from 'class-validator';
 
 export class CreateWatchlistItemDto {
   @IsEnum(DataSource)
   dataSource: DataSource;
 
   @IsString()
+  @MaxLength(SYMBOL_MAXIMUM_LENGTH)
   symbol: string;
 }
diff --git a/libs/common/src/lib/dtos/update-asset-profile.dto.ts b/libs/common/src/lib/dtos/update-asset-profile.dto.ts
index 2291697941..965778761d 100644
--- a/libs/common/src/lib/dtos/update-asset-profile.dto.ts
+++ b/libs/common/src/lib/dtos/update-asset-profile.dto.ts
@@ -1,4 +1,7 @@
-import { COMMENT_MAXIMUM_LENGTH } from '@ghostfolio/common/config';
+import {
+  COMMENT_MAXIMUM_LENGTH,
+  SYMBOL_MAXIMUM_LENGTH
+} from '@ghostfolio/common/config';
 import { IsCurrencyCode } from '@ghostfolio/common/validators/is-currency-code';
 
 import {
@@ -86,6 +89,7 @@ export class UpdateAssetProfileDto {
 
   @IsOptional()
   @IsString()
+  @MaxLength(SYMBOL_MAXIMUM_LENGTH)
   symbol?: string;
 
   @IsObject()