fix(audio_service): validate message_id format using UUID (#12087)

Signed-off-by: -LAN- <laipz8200@outlook.com>
langgenius · Dec 25, 2024 · a1c78ad · a1c78ad
1 parent 754791e
commit a1c78ad
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/api/services/audio_service.py b/api/services/audio_service.py
@@ -1,5 +1,6 @@
 import io
 import logging
+import uuid
 from typing import Optional
 
 from werkzeug.datastructures import FileStorage
@@ -122,6 +123,10 @@ def invoke_tts(text_content: str, app_model, voice: Optional[str] = None):
                     raise e
 
         if message_id:
+            try:
+                uuid.UUID(message_id)
+            except ValueError:
+                return None
             message = db.session.query(Message).filter(Message.id == message_id).first()
             if message is None:
                 return None