diff --git a/dashboard/src/components/shared/PersonaForm.vue b/dashboard/src/components/shared/PersonaForm.vue
index 48f1a0d0e..bfd5caf1b 100644
--- a/dashboard/src/components/shared/PersonaForm.vue
+++ b/dashboard/src/components/shared/PersonaForm.vue
@@ -378,16 +378,26 @@ export default {
             }
 
             this.saving = true;
-            try {
-                const url = this.editingPersona ? '/api/persona/update' : '/api/persona/create';
-                const response = await axios.post(url, this.personaForm);
-
-                if (response.data.status === 'ok') {
-                    this.$emit('saved', response.data.message || this.tm('messages.saveSuccess'));
-                    this.closeDialog();
-                } else {
-                    this.$emit('error', response.data.message || this.tm('messages.saveError'));
+        try {
+            const url = this.editingPersona ? '/api/persona/update' : '/api/persona/create';
+            
+            // 白名单过滤字段
+            const allowedFields = ['persona_id', 'system_prompt', 'begin_dialogs', 'tools'];
+            const filteredData = {};
+            allowedFields.forEach(field => {
+                if (this.personaForm.hasOwnProperty(field)) {
+                    filteredData[field] = this.personaForm[field];
                 }
+            });
+
+            const response = await axios.post(url, filteredData);
+
+            if (response.data.status === 'ok') {
+                this.$emit('saved', response.data.message || this.tm('messages.saveSuccess'));
+                this.closeDialog();
+            } else {
+                this.$emit('error', response.data.message || this.tm('messages.saveError'));
+            }
             } catch (error) {
                 this.$emit('error', error.response?.data?.message || this.tm('messages.saveError'));
             }
@@ -533,4 +543,4 @@ export default {
 .v-virtual-scroll {
     padding-bottom: 16px;
 }
-</style>
\ No newline at end of file
+</style>