OpenSource/dify - dify - 浩瀚星图

文件历史

QuantumGhost 874406d934 security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and `ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) endpoints do not properly validate user permissions, allowing users without `editor` permission to access restricted functionality. This PR addresses this issue by adding proper permission check.		1 个月前
..
__init__.py	Initial commit	2 年前
dataset.py	security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518)	1 个月前
document.py	Fix basedpyright type errors (#25435)	1 个月前
error.py	Restructure the File errors in controller (#23801)	2 个月前
hit_testing.py	feat: API docs for service api (#24425)	2 个月前
metadata.py	Fix flask response: 200 -> {}, 200 (#25404)	1 个月前
segment.py	fix: child chunk API 404 due to UUID type comparison (#25234)	1 个月前
upload_file.py	feat: API docs for service api (#24425)	2 个月前