fix: File format check

base/src/main/java/com/tinyengine/it/common/enums/Enums.java

@@ -908,4 +908,94 @@ public String getValue() {
             return value;
         }
     }
+
+    public enum FileType {
+        /**
+         * File type zip.
+         */
+        ZIP("application/zip"),
+
+        /**
+         * File type json.
+         */
+        JSON("application/json"),
+
+        /**
+         * File type text.
+         */
+        TXT("text/plain"),
+
+        /**
+         * File type html.
+         */
+        HTML("text/html"),
+        /**
+         * File type png.
+         */
+        PNG("image/png"),
+
+        /**
+         * File type jpg.
+         */
+        JPG("image/jpeg");
+        private final String value;
+
+        FileType(String value) {
+            this.value = value;
+        }
+
+        /**
+         * Gets value.
+         *
+         * @return the value
+         */
+        public String getValue() {
+            return value;
+        }
+    }
+
+    public enum FileNameEnd {
+        /**
+         * File name end .zip.
+         */
+        ZIP(".zip"),
+
+        /**
+         * File name end .json.
+         */
+        JSON(".json"),
+
+        /**
+         * File name end .text.
+         */
+        TXT(".txt"),
+
+        /**
+         * File name end .html.
+         */
+        HTML(".html"),
+        /**
+         * File name end .png.
+         */
+        PNG(".png"),
+
+        /**
+         * File name end .jpg.
+         */
+        JPG(".jpeg");
+        private final String value;
+
+        FileNameEnd(String value) {
+            this.value = value;
+        }
+
+        /**
+         * Gets value.
+         *
+         * @return the value
+         */
+        public String getValue() {
+            return value;
+        }
+    }
 }

base/src/main/java/com/tinyengine/it/common/utils/SecurityFileCheckUtil.java

@@ -12,12 +12,14 @@
 package com.tinyengine.it.common.utils;
 
 import cn.hutool.core.util.ObjectUtil;
+import com.fasterxml.jackson.databind.ObjectMapper;
 import com.tinyengine.it.common.exception.ExceptionEnum;
 import com.tinyengine.it.common.exception.ServiceException;
 import org.springframework.util.StringUtils;
 import org.springframework.web.multipart.MultipartFile;
 
 import java.io.File;
+import java.io.IOException;
 import java.util.Locale;
 import java.util.Map;
 import java.util.Objects;
@@ -177,5 +179,14 @@ private static String getFileName(String filePath) {
         return file.getName();
     }
 
+    public static void isValidJson(MultipartFile file) {
+        ObjectMapper objectMapper = new ObjectMapper();
+        try {
+            // 将 MultipartFile 转换为 InputStream 并解析 JSON
+            objectMapper.readTree(file.getInputStream());
+        } catch (IOException e) {
+            throw new ServiceException(ExceptionEnum.CM308.getResultCode(), ExceptionEnum.CM308.getResultMsg());
+        }
+    }
 
 }

base/src/main/java/com/tinyengine/it/controller/ComponentController.java

@@ -13,6 +13,7 @@
 package com.tinyengine.it.controller;
 
 import com.tinyengine.it.common.base.Result;
+import com.tinyengine.it.common.enums.Enums;
 import com.tinyengine.it.common.exception.ExceptionEnum;
 import com.tinyengine.it.common.log.SystemControllerLog;
 import com.tinyengine.it.common.utils.SecurityFileCheckUtil;
@@ -74,6 +75,8 @@ public Result<FileResult> bundleCreateComponent(@RequestParam MultipartFile file
             return Result.failed(ExceptionEnum.CM307);
         }
         SecurityFileCheckUtil.validFileName(file.getOriginalFilename());
+        SecurityFileCheckUtil.checkFileType(file, Enums.FileNameEnd.JSON.getValue(), Enums.FileType.JSON.getValue());
+        SecurityFileCheckUtil.isValidJson(file);
         // 返回插入和更新的条数
         return componentService.readFileAndBulkCreate(file);
     }
@@ -98,6 +101,8 @@ public Result<BundleResultDto> bundleSplit(@RequestParam MultipartFile file) {
             return Result.failed(ExceptionEnum.CM307);
         }
         SecurityFileCheckUtil.validFileName(file.getOriginalFilename());
+        SecurityFileCheckUtil.checkFileType(file, Enums.FileNameEnd.JSON.getValue(), Enums.FileType.JSON.getValue());
+        SecurityFileCheckUtil.isValidJson(file);
         return componentService.bundleSplit(file);
     }
 

base/src/main/java/com/tinyengine/it/controller/I18nEntryController.java

@@ -13,6 +13,7 @@
 package com.tinyengine.it.controller;
 
 import com.tinyengine.it.common.base.Result;
+import com.tinyengine.it.common.enums.Enums;
 import com.tinyengine.it.common.exception.ExceptionEnum;
 import com.tinyengine.it.common.exception.ServiceException;
 import com.tinyengine.it.common.log.SystemControllerLog;
@@ -46,6 +47,7 @@
 import org.springframework.web.multipart.MultipartFile;
 
 import java.util.ArrayList;
+import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
 
@@ -248,7 +250,11 @@ public Result<FileResult> updateI18nSingleFile(
             if (file.isEmpty()) {
                 return Result.failed(ExceptionEnum.CM307);
             }
+            Map<String, String> fileTypeMap = new HashMap<>();
+            fileTypeMap.put(Enums.FileNameEnd.ZIP.getValue(), Enums.FileType.ZIP.getValue());
+            fileTypeMap.put(Enums.FileNameEnd.JSON.getValue(), Enums.FileType.JSON.getValue());
             SecurityFileCheckUtil.validFileName(file.getOriginalFilename());
+            SecurityFileCheckUtil.checkFileType(file, fileTypeMap);
             // 返回插入和更新的条数
             result = i18nEntryService.readSingleFileAndBulkCreate(file, id);
         }
@@ -285,6 +291,7 @@ public Result<FileResult> updateI18nMultiFile(
                 return Result.failed(ExceptionEnum.CM307);
             }
             SecurityFileCheckUtil.validFileName(file.getOriginalFilename());
+            SecurityFileCheckUtil.checkFileType(file, Enums.FileNameEnd.JSON.getValue(), Enums.FileType.JSON.getValue());
             // 返回插入和更新的条数
             result = i18nEntryService.readFilesAndbulkCreate(key, file, id);
         }

base/src/main/java/com/tinyengine/it/service/app/impl/I18nEntryServiceImpl.java

@@ -21,6 +21,7 @@
 import com.tinyengine.it.common.exception.ExceptionEnum;
 import com.tinyengine.it.common.exception.ServiceException;
 import com.tinyengine.it.common.log.SystemServiceLog;
+import com.tinyengine.it.common.utils.SecurityFileCheckUtil;
 import com.tinyengine.it.common.utils.Utils;
 import com.tinyengine.it.mapper.I18nEntryMapper;
 import com.tinyengine.it.mapper.I18nLangMapper;
@@ -326,7 +327,8 @@ public Result<FileResult> readSingleFileAndBulkCreate(MultipartFile file, int ho
         List<EntriesItem> entriesArr = new ArrayList<>();
         String contentType = file.getContentType();
 
-        if (Objects.equals(contentType, Enums.MimeType.JSON.getValue())) {
+        if (Objects.equals(contentType, Enums.FileType.JSON.getValue())) {
+            SecurityFileCheckUtil.isValidJson(file);
             Result<JsonFile> parseJsonFileStreamResult = Utils.parseJsonFileStream(file);
             if (!parseJsonFileStreamResult.isSuccess()) {
                 return Result.failed(ExceptionEnum.CM001);
@@ -357,6 +359,7 @@ public Result<FileResult> readSingleFileAndBulkCreate(MultipartFile file, int ho
     @SystemServiceLog(description = "readFilesAndbulkCreate 批量上传词条数据")
     @Override
     public Result<FileResult> readFilesAndbulkCreate(String lang, MultipartFile file, int host) throws Exception {
+        SecurityFileCheckUtil.isValidJson(file);
         Result<JsonFile> parseJsonFileStreamResult = Utils.parseJsonFileStream(file);
         // 解析 JSON 数据
         if (!parseJsonFileStreamResult.isSuccess()) {

base/src/test/java/com/tinyengine/it/service/app/impl/I18nEntryServiceImplTest.java

@@ -284,7 +284,7 @@ void testReadSingleFileAndBulkCreate() throws Exception {
         when(file.getOriginalFilename()).thenReturn("originalName");
         when(file.getName()).thenReturn("123");
         when(file.getBytes()).thenReturn("{\"name\":\"value\"}".getBytes(StandardCharsets.UTF_8));
-        when(file.getInputStream()).thenReturn(IoUtil.toStream("test".getBytes(StandardCharsets.UTF_8)));
+        when(file.getInputStream()).thenReturn(IoUtil.toStream("{\"name\":\"value\"}".getBytes(StandardCharsets.UTF_8)));
 
         Result<FileResult> result = i18nEntryServiceImpl.readSingleFileAndBulkCreate(file, 0);
 
@@ -299,7 +299,7 @@ void testReadFilesAndbulkCreate() throws Exception {
         when(file.getOriginalFilename()).thenReturn("originalName");
         when(file.getName()).thenReturn("123");
         when(file.getBytes()).thenReturn("{\"name\":\"value\"}".getBytes(StandardCharsets.UTF_8));
-        when(file.getInputStream()).thenReturn(IoUtil.toStream("test".getBytes(StandardCharsets.UTF_8)));
+        when(file.getInputStream()).thenReturn(IoUtil.toStream("{\"name\":\"value\"}".getBytes(StandardCharsets.UTF_8)));
         // file not existed
         Result<FileResult> result = i18nEntryServiceImpl.readFilesAndbulkCreate("1", file, 0);
         Assertions.assertNull(result.getData());