From 7e04321614a9efdd565fb34b5c52f3dc0b759b1f Mon Sep 17 00:00:00 2001
From: starmen1265 <starmen1265@163.com>
Date: Mon, 9 Mar 2026 16:07:11 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=20Cross-Review=20?=
 =?UTF-8?q?=E5=8F=91=E7=8E=B0=E7=9A=84=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 dev-workflow/dev_workflow.py |  8 ++++++++
 dev-workflow/stats.py        | 14 +++++++++++++-
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/dev-workflow/dev_workflow.py b/dev-workflow/dev_workflow.py
index 16ff155..a59a42f 100644
--- a/dev-workflow/dev_workflow.py
+++ b/dev-workflow/dev_workflow.py
@@ -29,7 +29,15 @@ def cmd_record_event(args):
             for item in args.metadata:
                 if '=' in item:
                     key, value = item.split('=', 1)
+                    # 白名单校验：只允许字母、数字、下划线、连字符、点、空格
+                    import re
+                    if not re.match(r'^[\w\-\. \u4e00-\u9fff]+$', value):
+                        print(f"⚠️ 警告: metadata 值 '{value}' 包含不允许的字符，将被转义", file=sys.stderr)
+                        # 转义特殊字符，只保留安全字符
+                        value = re.sub(r'[^\w\-\. \u4e00-\u9fff]', '_', value)
                     metadata[key] = value
+                else:
+                    print(f"⚠️ 警告: 无效的 metadata 格式 '{item}'，应为 key=value 格式，已忽略", file=sys.stderr)
         
         # 记录事件
         record_event(
diff --git a/dev-workflow/stats.py b/dev-workflow/stats.py
index 3b5d1e8..d405533 100644
--- a/dev-workflow/stats.py
+++ b/dev-workflow/stats.py
@@ -6,6 +6,7 @@ Cross-Debate 统计报告模块
 
 import json
 import os
+import sys
 import fcntl
 from datetime import datetime, timezone
 from pathlib import Path
@@ -49,6 +50,12 @@ class StatsManager:
                 filtered[key] = '***REDACTED***'
             elif isinstance(value, dict):
                 filtered[key] = self._filter_sensitive_data(value)
+            elif isinstance(value, list):
+                # 处理列表中的字典元素
+                filtered[key] = [
+                    self._filter_sensitive_data(item) if isinstance(item, dict) else item
+                    for item in value
+                ]
             else:
                 filtered[key] = value
         return filtered
@@ -75,7 +82,12 @@ class StatsManager:
             # 获取共享锁（读锁）
             fcntl.flock(f.fileno(), fcntl.LOCK_SH)
             try:
-                data = json.load(f)
+                try:
+                    data = json.load(f)
+                except json.JSONDecodeError as e:
+                    # 文件损坏时返回空数据结构
+                    print(f"⚠️ 警告: 统计文件损坏，将返回空数据: {e}", file=sys.stderr)
+                    return {"events": []}
             finally:
                 # 释放锁
                 fcntl.flock(f.fileno(), fcntl.LOCK_UN)