{"record":{"id":"6b03ed63d43985a1","repo":"Tencent/WeKnora","slug":"invalid-file-path-w-6b03ed","errorCode":null,"errorMessage":"invalid file path: %w","messagePattern":"invalid file path: %w","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"internal/application/service/file/minio.go","lineNumber":117,"sourceCode":"}\n\n// parseMinioFilePath extracts the object name from a provider scheme: minio://{bucket}/{objectKey}\nfunc (s *minioFileService) parseMinioFilePath(filePath string) (string, error) {\n\t// Provider scheme format: minio://{bucket}/{objectKey}\n\tconst prefix = \"minio://\"\n\tif !strings.HasPrefix(filePath, prefix) {\n\t\treturn \"\", fmt.Errorf(\"invalid MinIO file path: %s\", filePath)\n\t}\n\trest := strings.TrimPrefix(filePath, prefix)\n\tparts := strings.SplitN(rest, \"/\", 2)\n\tif len(parts) != 2 || parts[0] == \"\" || parts[1] == \"\" {\n\t\treturn \"\", fmt.Errorf(\"invalid MinIO file path: %s\", filePath)\n\t}\n\tif parts[0] != s.bucketName {\n\t\treturn \"\", fmt.Errorf(\"bucket mismatch in path: got %s, want %s\", parts[0], s.bucketName)\n\t}\n\tif err := utils.SafeObjectKey(parts[1]); err != nil {\n\t\treturn \"\", fmt.Errorf(\"invalid file path: %w\", err)\n\t}\n\treturn parts[1], nil\n}\n\n// SaveFile saves a file to MinIO\nfunc (s *minioFileService) SaveFile(ctx context.Context,\n\tfile *multipart.FileHeader, tenantID uint64, knowledgeID string,\n) (string, error) {\n\t// Generate object name\n\text := filepath.Ext(file.Filename)\n\tobjectName := fmt.Sprintf(\"%d/%s/%s%s\", tenantID, knowledgeID, uuid.New().String(), ext)\n\n\t// Open file\n\tsrc, err := file.Open()\n\tif err != nil {\n\t\treturn \"\", fmt.Errorf(\"failed to open file: %w\", err)\n\t}\n\tdefer src.Close()","sourceCodeStart":99,"sourceCodeEnd":135,"githubUrl":"https://github.com/Tencent/WeKnora/blob/988cbb03305e055d8ebb7d46d9ac6cc0803cd074/internal/application/service/file/minio.go#L99-L135","documentation":"MinIO path parser guard: the object key was rejected by SafeObjectKey, meaning it contains unsafe constructs (path traversal such as .., absolute markers, or invalid characters); the operation is refused to prevent accessing keys outside the intended prefix.","triggerScenarios":"Thrown at internal/application/service/file/minio.go:117 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Sanitize object keys before storing or requesting them","Reject traversal-prone keys where the path originates","Log the offending key for input tracing"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"988cbb03305e055d8ebb7d46d9ac6cc0803cd074","analyzedAt":"2026-09-02T14:41:08.344Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-08T10:18:20.063Z"}