improve session id validation

epam · Jan 14, 2025 · 59e0c3f · 59e0c3f
1 parent b3dddf6
commit 59e0c3f
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/...main/java/com/epam/aidial/core/server/service/codeinterpreter/CodeInterpreterService.java b/...main/java/com/epam/aidial/core/server/service/codeinterpreter/CodeInterpreterService.java
@@ -321,8 +321,14 @@ private ResourceDescriptor sessionResource(ProxyContext context, String sessionI
                     ? ("user/" + sessionId)
                     : ("app/" + bucket.getAppBucket() + "/" + sessionId);
 
-            return ResourceDescriptorFactory.fromEncoded(ResourceTypes.CODE_INTERPRETER_SESSION,
+            ResourceDescriptor resource = ResourceDescriptorFactory.fromEncoded(ResourceTypes.CODE_INTERPRETER_SESSION,
                     bucket.getUserBucket(), bucket.getUserBucketLocation(), path);
+
+            if (resource.isFolder()) {
+                throw new IllegalArgumentException("Invalid resource");
+            }
+
+            return resource;
         } catch (Throwable e) {
             throw new IllegalArgumentException("Invalid sessionId: " + sessionId);
         }