fix(server): 路由 id 使用 ParseIntPipe，限制分页与批量数组上限

2026-08-07 16:38:03 +08:00
parent 899d2dde5b
commit 5b5ffb5b9e
14 changed files with 96 additions and 58 deletions
--- a/apps/server/src/common/batch-ids.dto.ts
+++ b/apps/server/src/common/batch-ids.dto.ts
@@ -1,8 +1,9 @@
-import { ArrayNotEmpty, IsArray, IsInt, Min } from 'class-validator';
+import { ArrayMaxSize, ArrayNotEmpty, IsArray, IsInt, Min } from 'class-validator';

 export class BatchIdsDto {
  @IsArray()
  @ArrayNotEmpty()
+  @ArrayMaxSize(500)
  @IsInt({ each: true })
  @Min(1, { each: true })
  ids: number[];