kai/writer-work-flow
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(backend): API 文本输入加 max_length + 请求体大小中间件（CR-H9）

Browse Source
This commit is contained in:
Yaojia Wang
2026-07-08 10:53:44 +02:00
parent 26f10d023d
commit e1a24a2c2c
13 changed files with 223 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
apps/api/ww_api/schemas/rules.py
View File

@@ -14,8 +14,13 @@ from pydantic import BaseModel, Field, StringConstraints
RuleLevel = Literal["global", "genre", "style", "project"]
# 规则正文长度上界（CR-H9：防超长入参 DoS/成本）。
_RULE_CONTENT_MAX = 10_000
# 先 strip 再校验长度：纯空白内容（" "）strip 后为空 → 422（QA MEDIUM：此前被接受入库）。
RuleContent = Annotated[str, StringConstraints(strip_whitespace=True, min_length=1)]
RuleContent = Annotated[
str, StringConstraints(strip_whitespace=True, min_length=1, max_length=_RULE_CONTENT_MAX)
]
class RuleCreateRequest(BaseModel):