fix: 推送画像过滤_前缀内部键(防CRM泄漏)

Co-Authored-By: Claude Code <noreply@anthropic.com>
2026-10-08 11:42:15 +08:00
parent 383158a03d
commit 1416ebf104
2 changed files with 36 additions and 1 deletions
@@ -86,7 +86,10 @@ async def _build_payload(

    raw_info = profile.raw_info or {}
    client_info = conv.client_info or {}
-    profile_out = dict(raw_info)
+    # _ 前缀内部状态(一次性计数等)不进推送画像(spec §4.3——渲染侧
+    # 两处有过滤,推送端曾整体拷贝泄漏)
+    profile_out = {k: v for k, v in raw_info.items()
+                   if not str(k).startswith("_")}
    profile_out["country"] = resolve_country(client_info.get("ip", ""))
    profile_out["source"] = conv.source.value
    if client_info.get("lang"):