Added:

- Chat message cleaning to prevent HTML injection
- Player hand size to game state
- Deck automatically creates sets when it doesnt have any cards left

Mau/Deck.cs

@@ -6,6 +6,12 @@ public class Deck
     public List<Card> UsedDeck = new();
 
     public Deck()
+    {
+        CreateSet();
+        ShuffleDeck();
+    }
+
+    private void CreateSet()
     {
         foreach (CardType cardType in Enum.GetValues(typeof(CardType)))
         {
@@ -21,7 +27,6 @@ public class Deck
                 UnusedDeck.Add(new Card(cardType, cardValue));
             }
         }
-        ShuffleDeck();
     }
     
     public List<Card> GetUnusedDeck()
@@ -56,6 +61,12 @@ public class Deck
     {
         UnusedDeck.AddRange(UsedDeck);
         UsedDeck.Clear();
+
+        if (UnusedDeck.Count == 0)
+        {
+            CreateSet();
+        }
+        
         ShuffleDeck();
     }
 

Mau/GameState.cs

@@ -33,10 +33,12 @@ public class PlayerDTO
 {
     public string Name { get; set; }
     public string Id { get; set; }
+    public int CardsLeft { get; set; }
     
     public PlayerDTO(Player player)
     {
         Name = player.Connection.Name;
         Id = player.Connection.ConnectionId;
+        CardsLeft = player.Hand.Count;
     }
 }

Room/Room.cs

@@ -1,5 +1,6 @@
 using System.Net.WebSockets;
 using System.Text.Json;
+using System.Text.RegularExpressions;
 using MauMau_Server.Mau;
 
 namespace MauMau_Server.Websockets;
@@ -45,7 +46,12 @@ public class Room
                 }
                 case "CHAT":
                 {
-                    _chat.SendChatMessage(connection, message.Payload);
+                    var cleanedMessage = StripHTML(message.Payload);
+                    if (string.IsNullOrWhiteSpace(cleanedMessage))
+                    {
+                        cleanedMessage = "Mau!";
+                    };
+                    _chat.SendChatMessage(connection, cleanedMessage);
                     break;
                 }
             }
@@ -103,4 +109,9 @@ public class Room
     {
         return _connections.Count == 0;
     }
+    
+    private static string StripHTML(string input)
+    {
+        return Regex.Replace(input, "<.*?>", String.Empty);
+    }
 }