xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 11 Pull Requests 2 Actions Packages Projects Releases 7 Wiki Activity

fix(security): 第三轮审计P1修复 - 音色克隆SSRF防护 + 支付接口异常信息脱敏 #388

Merged
xiaoxia merged 1 commits from fix/voice-clone-ssrf into develop 2026-07-16 12:58:51 +08:00
Conversation 0 Commits 1 Files Changed 3
+109 -1
xiaoxia commented 2026-07-16 09:40:15 +08:00
Owner
Copy Link
Copy Source

变更内容

P1-1: 音色克隆 source_audio_url SSRF 防护（二阶SSRF）

  • 在 VoiceCloneWorkflowService.start_clone() 和 retry_clone() 中增加 URL 安全校验
  • 使用 packages.shared.url_security.validate_url_safety 统一防护
  • 校验失败时标记 profile 为 failed，错误信息明确，不提交到 CosyVoice 服务
  • 新增 4 个单元测试覆盖 start_clone + retry_clone 的 SSRF 场景

P1-2: 订阅支付回调接口异常信息脱敏

  • payment_callback 异常时不再返回原始异常字符串（可能泄漏数据库错误、内部路径等）
  • 改为返回通用提示「支付处理失败，请稍后重试」
  • 详细错误记录到服务端日志，保留排查能力

测试

  • tests/unit/test_voice_clone_workflow.py 22个测试全部通过
  • tests/unit/test_url_security.py 33个测试全部通过
## 变更内容 ### P1-1: 音色克隆 source_audio_url SSRF 防护（二阶SSRF） - 在 `VoiceCloneWorkflowService.start_clone()` 和 `retry_clone()` 中增加 URL 安全校验 - 使用 `packages.shared.url_security.validate_url_safety` 统一防护 - 校验失败时标记 profile 为 failed，错误信息明确，不提交到 CosyVoice 服务 - 新增 4 个单元测试覆盖 start_clone + retry_clone 的 SSRF 场景 ### P1-2: 订阅支付回调接口异常信息脱敏 - `payment_callback` 异常时不再返回原始异常字符串（可能泄漏数据库错误、内部路径等） - 改为返回通用提示「支付处理失败，请稍后重试」 - 详细错误记录到服务端日志，保留排查能力 ## 测试 - `tests/unit/test_voice_clone_workflow.py` 22个测试全部通过 - `tests/unit/test_url_security.py` 33个测试全部通过
xiaoxia added 1 commit 2026-07-16 09:40:15 +08:00
fix(security): 第三轮审计P1修复 - 音色克隆SSRF防护 + 支付接口异常信息脱敏
CI Build & Deploy Pipeline / Build Staging API Image (push) Has been skipped
Details
CI Build & Deploy Pipeline / Build Staging Web Image (push) Has been skipped
Details
CI Build & Deploy Pipeline / Build Staging Worker Image (push) Has been skipped
Details
CI Build & Deploy Pipeline / Build Production API Image (push) Has been skipped
Details
CI Build & Deploy Pipeline / Build Production Web Image (push) Has been skipped
Details
CI Build & Deploy Pipeline / Build Production Worker Image (push) Has been skipped
Details
CI Build & Deploy Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been skipped
Details
CI Build & Deploy Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Frontend Lint (push) Successful in 56s
Details
CI Build & Deploy Pipeline / Deploy Production (push) Has been skipped
Details
CI Build & Deploy Pipeline / Staging E2E Tests (push) Has been skipped
Details
CI Build & Deploy Pipeline / Staging API Integration Tests (push) Has been skipped
Details
CI Build & Deploy Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Production Browser E2E (push) Has been skipped
Details
CI Build & Deploy Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI Build & Deploy Pipeline / Production Browser E2E (pull_request) Has been skipped
Details
CI/CD Pipeline / Frontend Lint (pull_request) Successful in 57s
Details
CI/CD Pipeline / Unit Tests (push) Successful in 2m54s
Details
CI/CD Pipeline / Unit Tests (pull_request) Successful in 2m11s
Details
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 13m56s
Details
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 15m27s
Details
CI/CD Pipeline / Integration Tests (push) Successful in 2m41s
Details
CI/CD Pipeline / Integration Tests (pull_request) Successful in 2m28s
Details
c6d1ac9796 
P1-1: 音色克隆 source_audio_url 增加 SSRF 防护
- start_clone 和 retry_clone 均调用 validate_url_safety 校验 URL
- 校验失败标记为 failed，错误信息明确，不提交到 CosyVoice
- 新增 4 个单元测试覆盖 start_clone + retry_clone 的 SSRF 场景

P1-2: 订阅支付回调接口异常信息脱敏
- payment_callback 异常时不再返回原始异常信息
- 改为返回通用提示'支付处理失败，请稍后重试'
- 详细错误记录到服务端日志
xiaoxia merged commit 061b9cfcd6 into develop 2026-07-16 12:58:51 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P0
阻塞性，必须立即处理
 P1
高优先级
 P2
中优先级
 P3
低优先级/后考虑
 architecture
架构设计
 backend
后端相关
 blocked
阻塞中
 bug
Bug修复
 ci-bug
CI本身的bug
 ci-optimization
CI优化类任务
 ci-pipeline
CI流水线/workflow相关
 cleanup
代码清理
 devops
运维/部署/CI
 documentation
文档相关
 feature
新功能
 frontend
前端相关
 question
需要讨论确认
 ready
PR CI通过，可合并
 refactor
代码重构
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
auto-approve-bot xiaoxia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xiaoxia/xiaoxia-saas#388
Delete Branch "fix/voice-clone-ssrf"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?