Fix

app/features/user-card/actions/user-card.edit.server.ts

@@ -37,7 +37,6 @@ export const action: ActionFunction = async ({ request }) => {
 		}
 	}
 
-	// xxx: just autovalidate and prevent input from the boundary
 	const isSupporter = Boolean(user.roles?.includes("SUPPORTER"));
 
 	await UserCardRepository.updateOwnCard({

app/features/user-card/user-card-schemas.ts

@@ -31,6 +31,7 @@ export const updateUserCardSchema = z.object({
 	bannerImage: image({
 		label: "labels.bannerImage",
 		dimensions: "thick-banner",
+		autoValidate: true,
 	}),
 	unverifiedXpPoints: numberFieldOptional({ label: "labels.unverifiedXp" }),
 	unverifiedXpDivision: select({