Feat/profanity filter

package.json

@@ -18,5 +18,9 @@
   "lint-staged": {
     "stellar-payment-platform/**/*.js": "eslint",
     "payment-dashboard/**/*.{js,jsx}": "npm --prefix payment-dashboard run lint"
+  },
+  "dependencies": {
+    "bad-words": "^3.0.4",
+    "xss": "^1.0.15"
   }
 }

stellar-payment-platform/package.json

@@ -23,6 +23,7 @@
     "@faker-js/faker": "^10.5.0",
     "@prisma/client": "^6.1.0",
     "@stellar/stellar-sdk": "^16.0.1",
+    "bad-words": "^3.0.4",
     "compression": "^1.8.1",
     "connect-timeout": "^1.9.1",
     "cors": "^2.8.5",

stellar-payment-platform/receipts.test.js

@@ -34,6 +34,13 @@ jest.mock('dotenv', () => ({ config: jest.fn() }));
 
 jest.mock('./src/cleanup-cron', () => ({ scheduleCleanupJob: jest.fn() }));
 
+// bad-words ships as ESM; Jest runs in CJS mode — mock it to avoid transform errors.
+jest.mock('bad-words', () => {
+  return jest.fn().mockImplementation(() => ({
+    isProfane: jest.fn(() => false),
+  }));
+});
+
 // The receipts endpoint never touches the database, but loading server.js does
 // instantiate the Prisma client — mock it so no real connection is created.
 jest.mock('./prismaClient', () => ({