fix: 品牌下发审查修复（esc统一/语料中性化/穿越加固/反向断言动态化）

Co-Authored-By: Claude Code <noreply@anthropic.com>
2026-10-12 22:52:08 +08:00
parent bbc7bc520e
commit 7697673a3b
8 changed files with 137 additions and 34 deletions
@@ -76,6 +76,11 @@ async def avatar(request: Request):
    # "/static/kefu-small.png" 这类路径,取基名后拼租户 assets 目录,无路径
    # 逃逸面(单成分文件名不可能越出 assets/)
    name = pathlib.PurePosixPath(str(site.brand.get("avatar") or "")).name
+    # 复审加固: PurePosixPath 不认反斜杠(整串留在 .name 里),Windows 文件
+    # 系统却把反斜杠当分隔符——seed_dir/assets/.. 会真穿出资产目录 serve
+    # 任意文件。显式拒绝分隔符与目录点,命中即回退静态兜底。
+    if name in {".", ".."} or "/" in name or "\\" in name:
+        name = ""
    candidate = runtime.seed_dir / "assets" / name if name else None
    if candidate is not None and candidate.is_file():
        return FileResponse(