luulam/9router
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(gemini): validate native model id to block path traversal

Browse Source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
decolua
2026-06-26 11:01:24 +07:00
parent d1e98d9a60
commit f46811c75e
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/app/api/v1beta/models/[...path]/route.js
View File

@@ -12,6 +12,8 @@ import { initTranslators } from "open-sse/translator/index.js";
let initialized = false; let initialized = false;
const GEMINI_NATIVE_BASE_URL = "https://generativelanguage.googleapis.com/v1beta/models"; const GEMINI_NATIVE_BASE_URL = "https://generativelanguage.googleapis.com/v1beta/models";
// Gemini model id charset (matches sanitizeGeminiFunctionName); blocks path traversal in upstream URL.
const GEMINI_NATIVE_MODEL_PATTERN = /^[a-zA-Z0-9_.:-]+$/;
/** /**
* Initialize translators once * Initialize translators once
@@ -238,6 +240,9 @@ async function forwardGeminiNativeRequest(request, body, model, action) {
if (authError) return authError; if (authError) return authError;
const modelId = normalizeGeminiNativeModel(model); const modelId = normalizeGeminiNativeModel(model);
if (!GEMINI_NATIVE_MODEL_PATTERN.test(modelId)) {
return Response.json({ error: { message: "Invalid model" } }, { status: 400 });
}
const excludeConnectionIds = new Set(); const excludeConnectionIds = new Set();
const bodyText = JSON.stringify(body); const bodyText = JSON.stringify(body);
let lastError = null; let lastError = null;