#399

backend/app/controllers/post_imports_controller.rb

@@ -79,7 +79,7 @@ class PostImportsController < ApplicationController
     raise ArgumentError, '取込件数が多すぎます．' if rows.length > PostImportSourceParser::MAX_ROWS
 
     rows.map do |row|
-      value = ActionController::Parameters.new(row).permit(:source_row, :sourceRow, :url,
+      value = ActionController::Parameters.new(row).permit(:source_row, :sourceRow, :url, :metadata_url, :metadataUrl,
                                                             attributes: {}, provenance: {}, tag_sources: {},
                                                             fetch_warnings: [], validation_warnings: [])
       normalised = value.to_h.deep_transform_keys { _1.to_s.underscore }
@@ -100,6 +100,12 @@ class PostImportsController < ApplicationController
           (normalised['tag_sources'].keys - ['automatic', 'mapped', 'fixed', 'manual']).present?)
         raise ArgumentError, 'タグ由来の形式が不正です．'
       end
+      if normalised['tag_sources'].present? &&
+         (!normalised['tag_sources'].values.all?(String) ||
+          normalised['tag_sources'].values.any? { _1.bytesize > PostImportSourceParser::MAX_CELL_BYTES } ||
+          normalised['tag_sources'].values.sum(&:bytesize) > PostImportSourceParser::MAX_CELL_BYTES)
+        raise ArgumentError, 'タグ由来が大きすぎます．'
+      end
 
       normalised.symbolize_keys
     end