AI/dify
1
0
Fork 0
mirror of https://git.mirrors.martin98.com/https://github.com/langgenius/dify.git synced 2025-08-13 01:09:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(file_factory): validate upload_file_id format as UUID (#12084)

Browse Source 
Signed-off-by: -LAN- <laipz8200@outlook.com>
This commit is contained in:
-LAN- 2024-12-25 18:36:42 +08:00 committed by GitHub
parent 50b7ec3c73
commit 754791efd3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
api/factories/file_factory.py
View File

@ -1,4 +1,5 @@
import mimetypes import mimetypes
import uuid
from collections.abc import Callable, Mapping, Sequence from collections.abc import Callable, Mapping, Sequence
from typing import Any, cast from typing import Any, cast
@ -119,6 +120,11 @@ def _build_from_local_file(
upload_file_id = mapping.get("upload_file_id") upload_file_id = mapping.get("upload_file_id")
if not upload_file_id: if not upload_file_id:
raise ValueError("Invalid upload file id") raise ValueError("Invalid upload file id")
# check if upload_file_id is a valid uuid
try:
uuid.UUID(upload_file_id)
except ValueError:
raise ValueError("Invalid upload file id format")
stmt = select(UploadFile).where( stmt = select(UploadFile).where(
UploadFile.id == upload_file_id, UploadFile.id == upload_file_id,
UploadFile.tenant_id == tenant_id, UploadFile.tenant_id == tenant_id,