mtfyun/dify
1
0 Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-11-13 14:51:39 +08:00
Code Issues Packages Projects Releases Wiki Activity
15,074 Commits 1,092 Branches 180 Tags
codex/file-malware-scan
Commit Graph
3960 Commits
Author SHA1 Message Date
JyongandClaude Fable 5.2 cddc789dca feat(file-scan): make the scanner request timeout configurable, default 300 seconds 
FILE_SCAN_REQUEST_TIMEOUT_SECONDS now applies to every scanner type.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
 2026-11-12 15:05:41 +08:00
JyongandClaude Fable 5.2 be340e569c refactor(file-scan): let the custom endpoint scanner hold its own address and key 
The Custom Endpoint scanner no longer goes through API-based extensions.
A workspace enters the endpoint URL and an API key in the scanner dialog,
and the endpoint receives the file content directly instead of a signed
download link.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
 2026-11-12 15:04:19 +08:00
JyongandClaude Fable 5.2 9cf281a9ec fix(file-scan): require credentials again when a scanner's address changes 
A stored key is never returned to the console, but an owner or admin
could change the Cloudmersive endpoint to a server they control and
receive the stored key through the connectivity check.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
 2026-11-12 14:27:58 +08:00
JyongandClaude Fable 5.2 7d6c1845b8 feat(file-scan): scan uploaded knowledge base files for malware 
Add a shared file malware-scanning module and use it in the Classic
Knowledge Base, RAG Pipeline local files and the Agent Knowledge Base.

- core/file_scan: scanner adapters for ClamAV (deployment-configured),
  Cloudmersive, Scanii, OPSWAT MetaDefender Cloud and API-based
  extensions (new `file.malware_scan` extension point).
- services/file_scan: FileScanService is the single entry point other
  modules call. Providers are workspace-wide; a policy belongs to a
  scope (dataset, knowledge_fs_space), so further modules can adopt
  scanning without schema changes.
- Each file is scanned on its own: a rejected file fails only its own
  document. Malware always blocks and deletes the stored original;
  invalid credentials and exhausted quota stop processing regardless of
  the "allow" fallback.
- Console: workspace scanner management and a per-knowledge-base
  policy section in both settings forms; the Agent Knowledge Base
  upload keeps going after a rejected file and explains each failure.
- Off by default behind FILE_SCAN_ENABLED.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
 2026-11-11 18:37:03 +08:00
林玮 (Jade Lin) a75c498f09 fix: isolate trial and paid credit pools (#46051) 2026-11-11 08:29:17 +00:00
FFXNandautofix-ci[bot] f3f9b121a4 feat(knowledge): add GitHub tree previews to source selection (#45990) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-11 02:47:23 +00:00
QuantumGhostandzxhlyh a4d64bcddd feat(hitl): improve forms, notifications, and IM contact sync (#45945) 
Co-authored-by: zxhlyh <jasonapring2015@outlook.com>
 2026-11-10 09:00:41 +00:00
ffffff55 f57fca6430 fix(api): percent-encode custom tool path parameters (#45965) 2026-11-10 08:19:53 +00:00
非法操作andautofix-ci[bot] ce26b22970 refactor(api): isolate trigger execution lifecycle (#45950) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-10 08:17:39 +00:00
非法操作 27297e954f refactor(api): inject trigger debug runtime (#45946) 2026-11-10 07:09:35 +00:00
非法操作 17686733f7 refactor(api): isolate trigger schedule runtime (#45941) 2026-11-10 06:28:06 +00:00
ChengFa 51f3625ee3 fix(trace): reject trailing newline in external trace id validation (#45534) 2026-11-10 05:22:10 +00:00
Asuka MinatoandCodex 1212bb3583 ci: enable Ruff B901 (#44104) 
Co-authored-by: Codex <codex@openai.com>
 2026-11-10 05:20:16 +00:00
非法操作andStream 9fbd9dcd33 refactor(api): isolate native webhook runtime (#45912) 
Co-authored-by: Stream <Stream_2@qq.com>
 2026-11-10 05:08:50 +00:00
Evan 7d5cc3721c fix(agent): tolerate malformed ReAct action payloads (#45201) 2026-11-10 03:59:58 +00:00
zyssyz123 cfa215cb62 fix(api): restrict classic app model fallbacks to active models (#45951) 2026-11-10 03:57:13 +00:00
bingtang 7c34331579 fix(rag): strip URL query/fragment before deriving file suffix in load_from_url (#43338) 2026-11-09 23:15:44 +00:00
xuan b29552aae0 fix: keep the docx external image extension when Content-Type has parameters (#45816) 2026-11-09 16:48:58 +00:00
ChengFa 130291b6b2 fix(file): strip surrounding quotes from Content-Disposition filename (#45885) 2026-11-09 14:49:10 +00:00
xuan 52e299ef5f fix: support OpenAPI 3.1 nullable union parameter types in custom tools (#45895) 2026-11-09 13:22:03 +00:00
Saim Shafique af33e86076 fix(agent): treat null variable value as unset strategy param (#45904) 2026-11-09 12:55:18 +00:00
TINGyu123644TINGyu123644autofix-ci[bot]
 		62d63c6302 fix(api): preserve zero JSON-RPC request id in MCP error responses (#42997) 
Co-authored-by: TINGyu123644 <TINGyu123644@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-09 11:31:25 +00:00
Fake1new 1450421e43 fix(agent): keep braces inside JSON strings from closing the ReAct action payload (#45741) 2026-11-09 11:21:47 +00:00
非法操作 dd21c981f2 refactor(api): inject trigger subscription renewal and event execution (#44653) 2026-11-09 02:42:52 +00:00
Xx.Zhao 337a0a8f7f fix(api): resolve agent node parameter templates without a JSON round-trip (#45419) 2026-11-08 19:26:03 +00:00
MindOfqc af0c3810b6 fix: send workflow agent uploads to vision models (#45745) 2026-11-08 16:55:51 +00:00
Paul Y HuiandClaude Opus 5.5 a8eeb467cc refactor(api): stop holding a database session across embedding model calls (#45788) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-08 06:23:28 +00:00
Alter-xyz b10ba3bfee fix(agent): pass declared app inputs to the agent run (#45425) 2026-11-08 05:46:55 +00:00
AlexMultiAgentandByron Wang db530adfa9 fix(rag): close downloaded temp file before reopening it in WordExtractor (#39894) 
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-08 05:43:48 +00:00
Denis ErmakovJHC56Byron Wang
 		0180bd0378 refactor(api): replace pytz with zoneinfo (#43362) 
Co-authored-by: JHC56 <246447183+JHC56@users.noreply.github.com>
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-08 05:38:19 +00:00
MindOfqc 96c2a718fe fix: encode OpenAPI form arrays as repeated fields (#45685) 2026-11-06 11:27:41 +00:00
mechmaster20 929c01ff9b fix(api): fix typos in trigger service, layers, and human input entities (#45680) 
Signed-off-by: mechmaster20 <srujan.gowni@iitgn.ac.in>
 2026-11-06 03:59:20 +00:00
lianbieandzhoufazhao 686b51f0d7 fix(rag): keep embedding vectors aligned when one in a batch is dropped (#45569) 
Co-authored-by: zhoufazhao <fazhao.zhou@wetrial.com>
 2026-11-05 13:03:13 +00:00
MindOfqc fe2b8bd346 fix(tools): preserve exponent-form custom API body numbers (#45548) 2026-11-05 07:57:33 +00:00
非法操作 11517691d2 refactor(api): isolate trigger OAuth authorization flow (#44505) 2026-11-05 06:21:44 +00:00
EvanandClaude Opus 5.5 fc53a9fed3 refactor(models): remove implicit sessions from workflow_run and credential accessors (#45168) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-05 04:49:45 +00:00
Jasonfish 3842f0b86a fix(agent): resolve workflow variables in knowledge metadata filters (#43854) 2026-11-05 01:40:10 +00:00
Xizhuo b379533805 docs: fix the WaterCrawlWebExtractor Args block (#42304) 2026-11-04 16:50:39 +00:00
felixClaude Opus 4.5Byron WangByron.wang
 		ca01a69f87 fix: use MESSAGE event type for LLM text chunks (#38302) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Byron Wang <byron@linux.com>
Co-authored-by: Byron.wang <byron@dify.ai>
 2026-11-04 12:49:19 +00:00
citizen204Byron Wang-LAN-
 		cd5c89a8af fix(notion-extractor): guard against empty table row results (#37836) 
Co-authored-by: Byron Wang <byron@dify.ai>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2026-11-04 12:41:23 +00:00
citizen204andByron Wang 6b98dc0655 fix: strip reasoning/thinking blocks from knowledge base summary output (#38623) 
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-04 12:34:26 +00:00
Yufeng HeandByron Wang cf7ac6120f fix: skip empty tool entries in agent_chat config validation (#37775) 
Signed-off-by: Yufeng He <40085740+he-yufeng@users.noreply.github.com>
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-04 10:39:42 +00:00
AymericGeffroyKoesioClaude Opus 4.6Byron Wang
 		f8d9c03750 fix(mcp): exclude null fields from Dynamic Client Registration payload (#34856) 
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-04 09:56:56 +00:00
Byron.wang 1ac9aa0d3c fix(api): complete chatflow streams after direct replies (#45552) 2026-11-04 09:34:19 +00:00
wangji0923复试资料crazywoolaByron.wang
 		7de3c2938c fix: default online drive prefix to root (#33912) 
Co-authored-by: 复试资料 <study@example.com>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: Byron.wang <byron@dify.ai>
 2026-11-04 08:50:58 +00:00
cyssprofilechenyangByron.wang
 		937fdb49a8 feat: retrieve external_documents add doc_metadata (#22496) 
Co-authored-by: profilechenyang <profilechenyang@didiglobal.com>
Co-authored-by: Byron.wang <byron@dify.ai>
 2026-11-04 08:14:02 +00:00
Yufeng HeandByron Wang 214cdfd6fa fix: reject empty user_input_form items instead of raising IndexError (#37671) 
Signed-off-by: Yufeng He <40085740+he-yufeng@users.noreply.github.com>
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-04 07:12:31 +00:00
fisherOne1fishergemini-code-assist[bot]
 		fe6d3a9176 fix: non-ASCII separators broken in FixedRecursiveCharacterTextSplitter (#33119) 
Co-authored-by: fisher <1186907891@qq.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2026-11-04 06:44:30 +00:00
Eapp1e 741699a03d fix(api): read the MCP provider updated_at as UTC in the console response (#45465) 
Signed-off-by: Eapp1e <163811520+Eapp1e@users.noreply.github.com>
 2026-11-04 04:30:15 +00:00
wangxiaolei 70c187f531 fix: fix agent app is not support (#45505) 2026-11-04 03:17:17 +00:00