[](https://hamel.dev/blog/posts/evals/#cb1-1)const noExposedUUID = message => { [](https://hamel.dev/blog/posts/evals/#cb1-2) // Remove all text within double curly braces [](https://hamel.dev/blog/posts/evals/#cb1-3) const sanitizedComment = message.comment.replace(/\{\{.*?\}\}/g, '') [](https://hamel.dev/blog/posts/evals/#cb1-4) [](https://hamel.dev/blog/posts/evals/#cb1-5) // Search for exposed UUIDs [](https://hamel.dev/blog/posts/evals/#cb1-6) const regexp = /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/ig [](https://hamel.dev/blog/posts/evals/#cb1-7) const matches = Array.from(sanitizedComment.matchAll(regexp)) [](https://hamel.dev/blog/posts/evals/#cb1-8) expect(matches.length, 'Exposed UUIDs').to.equal(0, 'Exposed UUIDs found') [](https://hamel.dev/blog/posts/evals/#cb1-9)}