notkshitij/SpecForge
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fix(server): validate JSON data, sanitize inputs, and harden query parsing.

Browse Source
This commit is contained in:
K
2026-05-03 22:43:11 +05:30
parent e8b5beca5e
commit 4c548ebc61
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/server/bridge/retrieve.py
+8
View File
@@ -42,6 +42,14 @@ def main():
try: try:
req = json.loads(raw_line) req = json.loads(raw_line)
query = req.get("query", "") query = req.get("query", "")
if not isinstance(query, str):
query = str(query)
query = query.strip()
if not query:
response = {"error": "query must be a non-empty string"}
sys.stdout.write(json.dumps(response) + "\n")
sys.stdout.flush()
continue
top_n = max(1, min(int(req.get("top_n", 5)), 20)) top_n = max(1, min(int(req.get("top_n", 5)), 20))
results, latency = retriever.retrieve(query, top_n=top_n) results, latency = retriever.retrieve(query, top_n=top_n)
response = {"results": results, "latency_seconds": round(latency, 4)} response = {"results": results, "latency_seconds": round(latency, 4)}