From e22359a5f8fd4cd1410f3c3659aaa4a0b6e789bb Mon Sep 17 00:00:00 2001
From: starmen1265 <starmen1265@163.com>
Date: Mon, 9 Mar 2026 15:18:59 +0800
Subject: [PATCH] =?UTF-8?q?=E5=AE=89=E5=85=A8=E4=BF=AE=E5=A4=8D(High):=20e?=
 =?UTF-8?q?vent=5Ftype=20=E5=92=8C=20mode=20=E5=8F=82=E6=95=B0=E6=B7=BB?=
 =?UTF-8?q?=E5=8A=A0=E7=99=BD=E5=90=8D=E5=8D=95=E6=A0=A1=E9=AA=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 定义 ALLOWED_EVENT_TYPES 白名单
- 定义 ALLOWED_MODES 白名单
- record_event() 函数中验证参数合法性
- 防止注入恶意事件类型或模式
---
 agents/haonan/workspace/dev-workflow/stats.py | 39 ++++++++++++++++++-
 1 file changed, 37 insertions(+), 2 deletions(-)

diff --git a/agents/haonan/workspace/dev-workflow/stats.py b/agents/haonan/workspace/dev-workflow/stats.py
index ad931e5..cded7e0 100644
--- a/agents/haonan/workspace/dev-workflow/stats.py
+++ b/agents/haonan/workspace/dev-workflow/stats.py
@@ -31,6 +31,26 @@ MAX_EVENTS = 10000
 # 敏感字段列表（不记录这些字段）
 SENSITIVE_FIELDS = {"password", "token", "secret", "key", "credential", "auth"}
 
+# 允许的 event_type 白名单
+ALLOWED_EVENT_TYPES = {
+    "command_executed",
+    "task_completed",
+    "stats_viewed",
+    "test_event",
+    "another_event",
+    "workflow_started",
+    "workflow_completed",
+    "error_occurred",
+}
+
+# 允许的 mode 白名单
+ALLOWED_MODES = {
+    "cross",
+    "normal",
+    "debug",
+    "test",
+}
+
 
 def _ensure_stats_dir():
     """确保统计目录存在"""
@@ -183,8 +203,23 @@ def record_event(
     
     Raises:
         TypeError: metadata 不是 dict 类型时
+        ValueError: event_type 或 mode 不在白名单中时
     """
     try:
+        # event_type 白名单校验
+        if event_type not in ALLOWED_EVENT_TYPES:
+            raise ValueError(
+                f"无效的 event_type: {event_type}. "
+                f"允许的值: {', '.join(sorted(ALLOWED_EVENT_TYPES))}"
+            )
+        
+        # mode 白名单校验
+        if mode not in ALLOWED_MODES:
+            raise ValueError(
+                f"无效的 mode: {mode}. "
+                f"允许的值: {', '.join(sorted(ALLOWED_MODES))}"
+            )
+        
         # metadata 类型校验
         if metadata is not None and not isinstance(metadata, dict):
             raise TypeError(f"metadata 必须是 dict 类型，当前为: {type(metadata).__name__}")
@@ -214,8 +249,8 @@ def record_event(
         _atomic_write(data)
         
         return True
-    except TypeError:
-        raise  # 重新抛出类型错误
+    except (TypeError, ValueError):
+        raise  # 重新抛出类型和值错误
     except Exception as e:
         logger.error(f"记录事件失败: {e}")
         return False