fix: 查重上传接口错误信息不再泄露内部异常(安全审计 P1) #82

Merged
xiaoxia merged 1 commits from fix/p1-duplication-error-info-leak into develop 2026-06-28 18:35:42 +08:00
+4 -2
View File
@@ -145,9 +145,10 @@ async def upload_for_duplication(
except HTTPException:
raise
except Exception as exc:
logger.error("读取查重文件失败: %s", exc, exc_info=True)
raise HTTPException(
status_code=status.HTTP_400_BAD_REQUEST,
detail=f"读取文件失败: {exc}",
detail="文件读取失败,请稍后重试",
) from exc
try:
@@ -157,9 +158,10 @@ async def upload_for_duplication(
content_type=validated_content_type,
)
except Exception as exc:
logger.error("查重文件上传 OSS 失败: %s", exc, exc_info=True)
raise HTTPException(
status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
detail=f"文件上传失败: {exc}",
detail="文件上传失败,请稍后重试",
) from exc
use_case = UploadForDuplicationUseCase(duplication_repository)