OpenSource/dify - dify - 浩瀚星图

Vēsture

QuantumGhost 874406d934 security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and `ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) endpoints do not properly validate user permissions, allowing users without `editor` permission to access restricted functionality. This PR addresses this issue by adding proper permission check.		pirms 1 mēnesi
..
__init__.py	feat: add MCP support (#20716)	pirms 3 mēnešiem
_workflow_exc.py	feat: Persist Variables for Enhanced Debugging Workflow (#20699)	pirms 4 mēnešiem
account.py	security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518)	pirms 1 mēnesi
api_based_extension.py	replace db with sa to get typing support (#23240)	pirms 3 mēnešiem
base.py	example add more type check (#24999)	pirms 2 mēnešiem
dataset.py	update sql in batch (#24801)	pirms 1 mēnesi
engine.py	feat(api): Add image multimodal support for LLMNode (#17372)	pirms 6 mēnešiem
enums.py	moving the `MessageStatus` class from the `models.model` module to `models.enums` module (#21867)	pirms 4 mēnešiem
model.py	update sql in batch (#24801)	pirms 1 mēnesi
provider.py	[Chore/Refactor] Improve type annotations in models module (#25281)	pirms 1 mēnesi
source.py	replace db with sa to get typing support (#23240)	pirms 3 mēnešiem
task.py	chore: apply static type checks on celery async task dispatches and imports (#24418)	pirms 2 mēnešiem
tools.py	feat: add MCP server headers support #22718 (#24760)	pirms 1 mēnesi
types.py	[Chore/Refactor] Improve type annotations in models module (#25281)	pirms 1 mēnesi
web.py	replace db with sa to get typing support (#23240)	pirms 3 mēnešiem
workflow.py	[Chore/Refactor] Improve type annotations in models module (#25281)	pirms 1 mēnesi