#399

backend/app/services/post_import_runner.rb

@@ -9,8 +9,9 @@ class PostImportRunner
 
   def run
     raise ArgumentError, "取込件数は #{ MAX_ROWS } 件までです．" if @rows.length > MAX_ROWS
+    raise ArgumentError, '取込データが大きすぎます．' if @rows.sum { |row| row.to_json.bytesize } > PostImportSourceParser::MAX_BYTES
 
-    results = @rows.map { |row| run_row(row.to_h.deep_transform_keys { _1.to_s.underscore }) }
+    results = @rows.map { |row| run_row(normalise_row(row)) }
     { created: results.count { _1[:status] == 'created' }, skipped: results.count { _1[:status] == 'skipped' },
       failed: results.count { _1[:status] == 'failed' }, rows: results }
   end
@@ -63,6 +64,10 @@ class PostImportRunner
   end
 
   def validate_row_structure! row
+    raise ArgumentError unless row['source_row'].is_a?(Integer) && row['source_row'].positive?
+    raise ArgumentError unless row['url'].is_a?(String)
+    raise ArgumentError unless row['attributes'].is_a?(Hash)
+    raise ArgumentError unless row['attributes'].values.all? { _1.is_a?(String) || _1.is_a?(Numeric) || _1 == true || _1 == false || _1.nil? }
     provenance = row['provenance']
     raise ArgumentError unless provenance.is_a?(Hash)
     allowed = ATTRIBUTE_KEYS + ['url']
@@ -73,4 +78,12 @@ class PostImportRunner
     raise ArgumentError if metadata_url.to_s.bytesize > PostImportSourceParser::MAX_CELL_BYTES
     raise ArgumentError if row.to_json.bytesize > PostImportSourceParser::MAX_BYTES
   end
+
+  def normalise_row row
+    unless row.is_a?(Hash) || row.is_a?(ActionController::Parameters)
+      raise ArgumentError, '取込行の形式が不正です．'
+    end
+
+    row.to_h.deep_transform_keys { _1.to_s.underscore }
+  end
 end