校验request id，避免可能存在的注入攻击风险

server/src/lib.rs

@@ -37,8 +37,8 @@ fn init() -> Router {
             .get("x-request-id")
             .and_then(|value| value.to_str().ok())
         {
-            Some(v) => v.to_string(),
-            None => String::from("unknown"),
+            Some(v) if v.chars().all(|c| c.is_alphanumeric()) => v.to_string(),// 确保请求ID只包含字母和数字
+            _ => String::from("unknown"),
         };
         tracing::error_span!("request_id", id = req_id)
     });