{"record":{"id":"86debcdfe3943e82","repo":"BigPizzaV3/CodexPlusPlus","slug":"name","errorCode":null,"errorMessage":"主题包包含加密内容或链接：{name}","messagePattern":"主题包包含加密内容或链接：(.+?)","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"crates/codex-plus-core/src/dream_skin_package.rs","lineNumber":109,"sourceCode":"    if bytes.is_empty() || bytes.len() > PACKAGE_LIMIT {\n        bail!(\"Dream Skin 主题包超过 32 MiB 限制\");\n    }\n    let mut archive =\n        ZipArchive::new(Cursor::new(bytes)).context(\"Dream Skin 主题包不是有效 ZIP\")?;\n    if archive.len() == 0 || archive.len() > FILE_LIMIT {\n        bail!(\"Dream Skin 主题包文件数量必须在 1 到 32 之间\");\n    }\n\n    let mut entries = Vec::new();\n    let mut unpacked = 0usize;\n    for index in 0..archive.len() {\n        let file = archive\n            .by_index(index)\n            .context(\"读取 Dream Skin ZIP 条目失败\")?;\n        let name = file.name().to_string();\n        validate_archive_entry_name(&name)?;\n        if file.encrypted() || file.is_symlink() {\n            bail!(\"主题包包含加密内容或链接：{name}\");\n        }\n        if file.is_dir() {\n            entries.push((name, None));\n            continue;\n        }\n        let base_name = name.rsplit('/').next().unwrap_or_default();\n        if base_name == \".DS_Store\" || name.starts_with(\"__MACOSX/\") {\n            entries.push((name, None));\n            continue;\n        }\n        if !ALLOWED_FILES.contains(&base_name) {\n            bail!(\"主题包包含不支持的文件：{name}\");\n        }\n        let limit = file_limit(base_name);\n        let mut content = Vec::new();\n        file.take((limit + 1) as u64)\n            .read_to_end(&mut content)\n            .context(\"读取 Dream Skin ZIP 内容失败\")?;","sourceCodeStart":91,"sourceCodeEnd":127,"githubUrl":"https://github.com/BigPizzaV3/CodexPlusPlus/blob/f2074595a281bc057525c748175c8eb9805b0673/crates/codex-plus-core/src/dream_skin_package.rs#L91-L127","documentation":"Security guard in validate_and_read_package: a ZIP entry is flagged encrypted or is a symlink. Encrypted entries cannot be inspected and symlink entries enable path escapes, so the package is rejected outright.","triggerScenarios":"Thrown at crates/codex-plus-core/src/dream_skin_package.rs:109 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Repackage the theme without ZIP encryption","Replace symlink entries with real files"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"f2074595a281bc057525c748175c8eb9805b0673","analyzedAt":"2026-08-23T12:52:24.489Z","contentChangedAt":"2026-08-23T12:52:24.489Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}