xinyouhe/fangke
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(server): 契约正则锚点\Z闭合——尾换行脏值不再放行

Browse Source 
Co-Authored-By: Claude Code <noreply@anthropic.com>
This commit is contained in:
浅念
2026-09-18 22:24:45 +08:00
parent 3b9d8ecee0
commit be0b53bce4
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/tracker/services/validation.py
+4 -3
View File
@@ -12,9 +12,10 @@ _URL_DROP_KEY = re.compile("|".join(C.URL_PARAM_DROP_PATTERNS), re.I)
_BIZ_CHANNEL = {"whatsapp", "phone", "email"}
_BIZ_RESULT = {"mail_sent", "mail_failed"}
_BIZ_ERROR = {"invalid", "spam", "other"}
_SUBMIT_RE = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$|^$") # uuid4，可空
_FORM_RE = re.compile(r"^cf7-\d{1,10}$") # CF7 表单 DOM id（f{n}-p{m} → 服务端规范化为 cf7-{form_id})
_PROD_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$") # slug ≤100
# 锚点一律 \Z 而非 $：Python `$` 匹配串尾换行前，"cf7-156\n" 等脏值会被放行（collect 端点公开）
_SUBMIT_RE = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\Z|\Z") # uuid4，可空
_FORM_RE = re.compile(r"^cf7-\d{1,10}\Z") # CF7 表单 DOM id（f{n}-p{m} → 服务端规范化为 cf7-{form_id})
_PROD_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]{0,99}\Z") # slug ≤100
def _biz_props_ok(name, props) -> bool:
"""业务事件属性逐键校验（spec §2 枚举/格式表；全部非自由文本）。