zlei6/ragflow - ragflow - GetSkill.work

zlei6/ragflow

mirror of https://github.com/infiniflow/ragflow.git synced 2026-08-14 12:47:14 +08:00

Files

2 lines

16 B

Go

Raw Normal View History

fix: validate custom model inputs (#15200) ### What problem does this PR solve? Closes #15199. The add-custom-model endpoint is routed through `/api/v1/providers/:provider_name/instances/:instance_name/models`, but the handler previously trusted `provider_name` and `instance_name` from the JSON body instead of the path target. A request could therefore hit one provider/instance URL while operating on a different body provider/instance. The same handler only rejected `model_types` when the slice was nil. An empty array passed validation and reached `ModelProviderService.AddCustomModel`, where `request.ModelTypes[0]` could panic. This PR makes the path provider/instance authoritative, rejects mismatched body values, rejects missing or empty `model_types`, and adds a service-level guard so direct service callers cannot hit the same panic path. ### Type of change - [x] Bug Fix (non-breaking change which fixes an issue)

2026-05-28 23:15:01 -03:00

package handler