fix: add path traversal protection to ingest endpoint

src/server/app.py

@@ -12,6 +12,16 @@ from src.core.ingest import DocumentIngestor
 from src.core.search import Searcher
 
 
+def _is_safe_path(path_str: str) -> bool:
+    """检查路径是否安全: 仅允许相对路径且不含 .. 穿越."""
+    normalized = os.path.normpath(path_str)
+    if os.path.isabs(normalized):
+        return False
+    if ".." in normalized.split(os.sep):
+        return False
+    return True
+
+
 # -- 请求模型 --
 class IngestRequest(BaseModel):
     file_path: str | None = None
@@ -109,6 +119,8 @@ def ingest_document(req: IngestRequest):
     ingestor = _get_ingestor()
     try:
         if req.file_path:
+            if not _is_safe_path(req.file_path):
+                raise HTTPException(status_code=400, detail="不允许的路径")
             path = Path(req.file_path)
             if not path.exists():
                 raise HTTPException(status_code=404, detail=f"文件不存在: {req.file_path}")