fix: tts fileID 校验归属 + 排行榜不下发他人 openid

- tts: client 传的 fileID 校验必须属于 tts-cache 目录,防伪造 cloud:// 换取他人私有文件 - leaderboard: ranked 去掉他人 openid 改用 isMe 标记,wxml 用 item.isMe 高亮 Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-25 14:59:15 +08:00
parent 88a2c349f4
commit 41aa81083f
3 changed files with 4 additions and 2 deletions
@@ -155,7 +155,7 @@ exports.main = async (event) => {
  // Top N for the board
  const ranked = allSorted.slice(0, limit).map((item, i) => ({
    rank: i + 1,
-    openid: item.openid,
+    isMe: item.openid === myOpenid,
    nickname: item.nickname || '',
    name: _displayName(item),
    duration: item.duration,