From 5031e4f812e75f821a2277a27b79d4a2923e7aa4 Mon Sep 17 00:00:00 2001
From: Sergiy Dybskiy <sergiy.dybskiy@sentry.io>
Date: Sat, 17 Oct 2026 18:49:43 -0400
Subject: [PATCH] Reject order ids that are not all digits

Co-authored-by: Claude <claude@anthropic.com>
---
 apps/pr-reviewer/fixtures/demo-pr/order-id.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/apps/pr-reviewer/fixtures/demo-pr/order-id.ts b/apps/pr-reviewer/fixtures/demo-pr/order-id.ts
index f7b0818..57bbbb4 100644
--- a/apps/pr-reviewer/fixtures/demo-pr/order-id.ts
+++ b/apps/pr-reviewer/fixtures/demo-pr/order-id.ts
@@ -1,3 +1,6 @@
 export function nextOrderId(last: string): string {
-  return String(parseInt(last) + 1);
+  if (!/^\d+$/.test(last)) {
+    throw new RangeError(`Order id is not numeric: ${last}`);
+  }
+  return String(Number(last) + 1);
 }