jyapayne/dify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(file_factory): validate upload_file_id before querying UploadFile (#11937)

Browse source 
Signed-off-by: -LAN- <laipz8200@outlook.com>
This commit is contained in:
-LAN- 2024-12-21 21:21:00 +08:00 • committed by GitHub
commit 8f73670925
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
api/factories/file_factory.py
View file

@ -116,8 +116,11 @@ def _build_from_local_file(
tenant_id: str, tenant_id: str,
transfer_method: FileTransferMethod, transfer_method: FileTransferMethod,
) -> File: ) -> File:
upload_file_id = mapping.get("upload_file_id")
if not upload_file_id:
raise ValueError("Invalid upload file id")
stmt = select(UploadFile).where( stmt = select(UploadFile).where(
UploadFile.id == mapping.get("upload_file_id"), UploadFile.id == upload_file_id,
UploadFile.tenant_id == tenant_id, UploadFile.tenant_id == tenant_id,
) )