fix(file_factory): validate upload_file_id before querying UploadFile (#11937)

Signed-off-by: -LAN- <laipz8200@outlook.com>
2024-12-21 21:21:00 +08:00 · 2024-12-21 21:21:00 +08:00 · 8f73670925
commit 8f73670925
parent 8c559d6231
1 changed files with 4 additions and 1 deletions
--- a/api/factories/file_factory.py
+++ b/api/factories/file_factory.py
@ -116,8 +116,11 @@ def _build_from_local_file(
    tenant_id: str,
    transfer_method: FileTransferMethod,
 ) -> File:
+    upload_file_id = mapping.get("upload_file_id")
+    if not upload_file_id:
+        raise ValueError("Invalid upload file id")
    stmt = select(UploadFile).where(
-        UploadFile.id == mapping.get("upload_file_id"),
+        UploadFile.id == upload_file_id,
        UploadFile.tenant_id == tenant_id,
    )