AI/dify
1
0
Fork 0
mirror of https://git.mirrors.martin98.com/https://github.com/langgenius/dify.git synced 2025-08-15 19:05:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

chore: address security alerts on braces escape and KaTeX (#3301)

Browse Source
This commit is contained in:
Nite Knite 2024-04-10 16:16:24 +08:00 committed by GitHub
parent 14bb0b02ac
commit 4c1cfd9278
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/app/components/base/prompt-editor/plugins/variable-value-block/index.tsx
View File

@ -31,7 +31,7 @@ const VariableValueBlock = () => {
if (matchArr === null) if (matchArr === null)
return null return null
const hashtagLength = matchArr[3].length + 4 const hashtagLength = matchArr[0].length
const startOffset = matchArr.index const startOffset = matchArr.index
const endOffset = startOffset + hashtagLength const endOffset = startOffset + hashtagLength
return { return {

2
web/app/components/base/prompt-editor/plugins/variable-value-block/utils.ts
View File

@ -1,5 +1,5 @@
export function getHashtagRegexString(): string { export function getHashtagRegexString(): string {
const hashtag = '(\{)(\{)([a-zA-Z_][a-zA-Z0-9_]{0,29})(\})(\})' const hashtag = '\\{\\{[a-zA-Z_][a-zA-Z0-9_]{0,29}\\}\\}'
return hashtag return hashtag
} }

2
web/package.json
View File

@ -44,7 +44,7 @@
"immer": "^9.0.19", "immer": "^9.0.19",
"js-audio-recorder": "^1.0.7", "js-audio-recorder": "^1.0.7",
"js-cookie": "^3.0.1", "js-cookie": "^3.0.1",
"katex": "^0.16.7", "katex": "^0.16.10",
"lamejs": "^1.2.1", "lamejs": "^1.2.1",
"lexical": "^0.12.2", "lexical": "^0.12.2",
"lodash-es": "^4.17.21", "lodash-es": "^4.17.21",

9
web/yarn.lock
View File

@ -4092,13 +4092,20 @@ jsonc-eslint-parser@^2.0.4, jsonc-eslint-parser@^2.1.0:
object.assign "^4.1.4" object.assign "^4.1.4"
object.values "^1.1.6" object.values "^1.1.6"
katex@^0.16.0, katex@^0.16.7: katex@^0.16.0:
version "0.16.8" version "0.16.8"
resolved "https://registry.npmjs.org/katex/-/katex-0.16.8.tgz" resolved "https://registry.npmjs.org/katex/-/katex-0.16.8.tgz"
integrity sha512-ftuDnJbcbOckGY11OO+zg3OofESlbR5DRl2cmN8HeWeeFIV7wTXvAOx8kEjZjobhA+9wh2fbKeO6cdcA9Mnovg== integrity sha512-ftuDnJbcbOckGY11OO+zg3OofESlbR5DRl2cmN8HeWeeFIV7wTXvAOx8kEjZjobhA+9wh2fbKeO6cdcA9Mnovg==
dependencies: dependencies:
commander "^8.3.0" commander "^8.3.0"
katex@^0.16.10:
version "0.16.10"
resolved "https://registry.yarnpkg.com/katex/-/katex-0.16.10.tgz#6f81b71ac37ff4ec7556861160f53bc5f058b185"
integrity sha512-ZiqaC04tp2O5utMsl2TEZTXxa6WSC4yo0fv5ML++D3QZv/vx2Mct0mTlRx3O+uUkjfuAgOkzsCmq5MiUEsDDdA==
dependencies:
commander "^8.3.0"
khroma@^2.0.0: khroma@^2.0.0:
version "2.0.0" version "2.0.0"
resolved "https://registry.npmjs.org/khroma/-/khroma-2.0.0.tgz" resolved "https://registry.npmjs.org/khroma/-/khroma-2.0.0.tgz"