From 7fc1b841be5369f1082bcca2232f08ab8d7238f5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=8E=8B=E5=BE=B7=E5=AE=87?= <kvtodev@outlook.com>
Date: Tue, 8 Sep 2026 12:30:55 +0800
Subject: [PATCH] =?UTF-8?q?=E6=94=B6=E5=8F=A3=20Raw=20=E5=9B=BE=E7=89=87?=
 =?UTF-8?q?=20base64=20=E6=A0=A1=E9=AA=8C=E9=94=99=E8=AF=AF?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

客户端仅返回稳定的 base64 格式错误提示

补充测试避免泄露解码器内部诊断细节
---
 server-rs/crates/api-server/src/raw_image.rs | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/server-rs/crates/api-server/src/raw_image.rs b/server-rs/crates/api-server/src/raw_image.rs
index 9b4cde5ac..f26294861 100644
--- a/server-rs/crates/api-server/src/raw_image.rs
+++ b/server-rs/crates/api-server/src/raw_image.rs
@@ -185,7 +185,7 @@ fn decode_image(value: RawImageData, field: &str) -> Result<ReferenceImage, AppE
     }
     let bytes = BASE64_STANDARD
         .decode(value.data.trim())
-        .map_err(|error| bad_request(format!("{field}.data 必须是有效 base64：{error}")))?;
+        .map_err(|_| bad_request(format!("{field}.data 必须是有效 base64")))?;
     Ok(ReferenceImage {
         bytes,
         file_name: format!("{field}.png"),
@@ -254,4 +254,22 @@ mod tests {
             serde_json::json!({"data": [{"b64_json": "aGVsbG8="}]})
         );
     }
+
+    #[test]
+    fn invalid_base64_uses_generic_client_message() {
+        let payload = serde_json::json!({
+            "image": {"data": "not base64!", "mimeType": "image/png"},
+            "prompt": "edit",
+            "width": 1024,
+            "height": 1024
+        });
+        let parsed: RawImageEditRequest = serde_json::from_value(payload).expect("request");
+        let error = match prepare_request(parsed) {
+            Ok(_) => panic!("invalid base64 should fail"),
+            Err(error) => error,
+        };
+        let rendered = format!("{error:?}");
+        assert!(rendered.contains("image.data 必须是有效 base64"));
+        assert!(!rendered.contains("InvalidByte"));
+    }
 }