Merge pull request 'fix: 查重上传接口错误信息不再泄露内部异常(安全审计 P1)' (#82) from fix/p1-duplication-error-info-leak into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Deploy / Deploy Staging (push) Has been cancelled
Deploy / Build Production Runtime Images (push) Has been cancelled
Deploy / Deploy Production (push) Has been cancelled
Deploy / Production Browser E2E (push) Has been cancelled

This commit was merged in pull request #82.
This commit is contained in:
2026-06-28 18:35:41 +08:00
+4 -2
View File
@@ -145,9 +145,10 @@ async def upload_for_duplication(
except HTTPException:
raise
except Exception as exc:
logger.error("读取查重文件失败: %s", exc, exc_info=True)
raise HTTPException(
status_code=status.HTTP_400_BAD_REQUEST,
detail=f"读取文件失败: {exc}",
detail="文件读取失败,请稍后重试",
) from exc
try:
@@ -157,9 +158,10 @@ async def upload_for_duplication(
content_type=validated_content_type,
)
except Exception as exc:
logger.error("查重文件上传 OSS 失败: %s", exc, exc_info=True)
raise HTTPException(
status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
detail=f"文件上传失败: {exc}",
detail="文件上传失败,请稍后重试",
) from exc
use_case = UploadForDuplicationUseCase(duplication_repository)