From de3a91827fbe2ae4629bddcd16f1adfe0191385f Mon Sep 17 00:00:00 2001 From: yau-wd Date: Fri, 26 Jun 2026 10:19:55 +0800 Subject: [PATCH] Fix Type Validation For Session ID (#6568) * fix: add type validation for session id * Update packages/server/src/utils/index.ts Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * Update packages/server/src/utils/index.ts Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * Update packages/server/src/utils/index.ts Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> --------- Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> --- packages/server/src/utils/index.ts | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/packages/server/src/utils/index.ts b/packages/server/src/utils/index.ts index 2eeeb5b0eb6..7a558407c7f 100644 --- a/packages/server/src/utils/index.ts +++ b/packages/server/src/utils/index.ts @@ -1829,16 +1829,25 @@ export const getMemorySessionId = ( if (!isInternal) { // Provided in API body - incomingInput.overrideConfig: { sessionId: 'abc' } if (incomingInput.overrideConfig?.sessionId) { - return incomingInput.overrideConfig?.sessionId + if (typeof incomingInput.overrideConfig.sessionId !== 'string') { + throw new InternalFlowiseError(StatusCodes.BAD_REQUEST, 'Invalid sessionId: must be a string') + } + return incomingInput.overrideConfig.sessionId } // Provided in API body - incomingInput.chatId if (incomingInput.chatId) { + if (typeof incomingInput.chatId !== 'string') { + throw new InternalFlowiseError(StatusCodes.BAD_REQUEST, 'Invalid chatId: must be a string') + } return incomingInput.chatId } } // Hard-coded sessionId in UI if (memoryNode && memoryNode.data.inputs?.sessionId) { + if (typeof memoryNode.data.inputs.sessionId !== 'string') { + throw new InternalFlowiseError(StatusCodes.BAD_REQUEST, 'Invalid sessionId: must be a string') + } return memoryNode.data.inputs.sessionId }