feat: realistic face avatar + voice input + ASR endpoint

2026-06-12 15:32:04 +08:00
parent 6fe84b6ef8
commit 8191cf4b41
26 changed files with 1934 additions and 228 deletions
@@ -31,13 +31,18 @@ export class ResumePdfService {
    }
  }

+  private escapeHtml(str: string): string {
+    return str.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+      .replace(/"/g, '&quot;').replace(/'/g, '&#039;')
+  }
+
  private buildHtml(params: {
    title: string
    content: string
    targetPosition?: string
    userName?: string
  }): string {
-    const contentHtml = params.content
+    const contentHtml = this.escapeHtml(params.content)
      .replace(/\n/g, '<br>')
      .replace(/### (.+)/g, '<h3>$1</h3>')
      .replace(/\*\*(.+?)\*\*/g, '<strong>$1</strong>')
@@ -66,8 +71,8 @@ export class ResumePdfService {
 </head>
 <body>
 <div class="page">
-  <h1>${params.title}</h1>
-  <div class="subtitle">${params.targetPosition ? `目标岗位: ${params.targetPosition}` : ''}</div>
+  <h1>${this.escapeHtml(params.title)}</h1>
+  <div class="subtitle">${params.targetPosition ? `目标岗位: ${this.escapeHtml(params.targetPosition)}` : ''}</div>
  <div class="content">${contentHtml}</div>
  <div class="footer">由 AI磁场·职引 生成</div>
 </div>
@@ -31,13 +31,10 @@ export class ResumeController {
  @Post(':id/download')
  async download(@Param('id') id: string, @CurrentUser('userId') userId: string, @Res() res: Response) {
    const resume = await this.resumeService.getDetail(id, userId)
-
-    const canDownload = await this.quotaService.checkDownload(userId, resume)
-    if (!canDownload) {
+    const canDownload = await this.quotaService.checkAndDeductDownload(userId, resume.paidDownload)
+    if (!canDownload && !resume.paidDownload) {
      throw new HttpException('请先付费下载', HttpStatus.PAYMENT_REQUIRED)
    }
-
-    await this.quotaService.deductDownload(userId, resume)
    if (!resume.paidDownload) {
      await this.resumeService.markPaid(id, userId)
    }