suguo
/
dify
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
dify/api/tasks
History
Blackoutta 57d476d4e2
feat: apply markdown rendering to HITL email, sanitize email subject and body (#32305) 
This PR:

1. Fixes the bug that email body of `HumanInput` node are sent as-is, without markdown rendering or sanitization
2. Applies HTML sanitization to email subject and body
3. Removes `\r` and `\n` from email subject to prevent SMTP header injection

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		2026-03-16 16:52:46 +08:00
..
annotation refactor: partition Celery task sessions into smaller, discrete execu… (#32085) 2026-02-08 21:01:54 +08:00
app_generate perf(api): utilize the message_workflow_run_id_idx while querying messages (#32944) 2026-03-04 14:11:14 +08:00
rag_pipeline refactor: reuse redis connection instead of create new one (#32678) 2026-03-09 15:53:21 +08:00
workflow_cfs_scheduler feat: introduce trigger functionality (#27644) 2025-11-12 17:59:37 +08:00
__init__.py feat: mypy for all type check (#10921) 2024-12-24 18:38:51 +08:00
add_document_to_index_task.py feat: Add summary index for knowledge. (#31625) 2026-01-29 13:47:35 +08:00
async_workflow_tasks.py refactor: move workflow package to dify_graph (#32844) 2026-03-02 18:42:30 +08:00
batch_clean_document_task.py perf: use batch delete method instead of single delete (#32036) 2026-02-06 15:12:32 +08:00
batch_create_segment_to_index_task.py refactor(api): move model_runtime into dify_graph (#32858) 2026-03-02 20:15:32 +08:00
clean_dataset_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
clean_document_task.py refactor: partition Celery task sessions into smaller, discrete execu… (#32085) 2026-02-08 21:01:54 +08:00
clean_notion_document_task.py refactor: document_indexing_sync_task split db session (#32129) 2026-02-09 17:12:16 +08:00
create_segment_to_index_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
deal_dataset_index_update_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
deal_dataset_vector_index_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
delete_account_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
delete_conversation_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
delete_segment_from_index_task.py perf: use batch delete method instead of single delete (#32036) 2026-02-06 15:12:32 +08:00
disable_segment_from_index_task.py feat: Add summary index for knowledge. (#31625) 2026-01-29 13:47:35 +08:00
disable_segments_from_index_task.py feat: Add summary index for knowledge. (#31625) 2026-01-29 13:47:35 +08:00
document_indexing_sync_task.py fix: serialize data_source_info with json.dumps in Notion sync task (#32747) 2026-03-01 19:37:51 +08:00
document_indexing_task.py refactor: reuse redis connection instead of create new one (#32678) 2026-03-09 15:53:21 +08:00
document_indexing_update_task.py refactor: document_indexing_update_task split database session (#32105) 2026-02-09 10:49:23 +08:00
duplicate_document_indexing_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
enable_segment_to_index_task.py feat: Add summary index for knowledge. (#31625) 2026-01-29 13:47:35 +08:00
enable_segments_to_index_task.py feat: Add summary index for knowledge. (#31625) 2026-01-29 13:47:35 +08:00
generate_summary_index_task.py feat(tasks): isolate summary generation to dedicated dataset_summary queue (#32972) 2026-03-06 14:35:28 +08:00
human_input_timeout_tasks.py refactor: human input node decouple db (#32900) 2026-03-04 13:18:32 +08:00
mail_account_deletion_task.py remove bare list, dict, Sequence, None, Any (#25058) 2025-09-06 03:32:23 +08:00
mail_change_mail_task.py remove bare list, dict, Sequence, None, Any (#25058) 2025-09-06 03:32:23 +08:00
mail_email_code_login.py remove bare list, dict, Sequence, None, Any (#25058) 2025-09-06 03:32:23 +08:00
mail_human_input_delivery_task.py feat: apply markdown rendering to HITL email, sanitize email subject and body (#32305) 2026-03-16 16:52:46 +08:00
mail_inner_task.py fix: remote code execution in email endpoints (#25753) 2025-09-18 16:45:34 +08:00
mail_invite_member_task.py remove bare list, dict, Sequence, None, Any (#25058) 2025-09-06 03:32:23 +08:00
mail_owner_transfer_task.py remove bare list, dict, Sequence, None, Any (#25058) 2025-09-06 03:32:23 +08:00
mail_register_task.py Feat/email register refactor (#25369) 2025-09-12 10:24:54 +08:00
mail_reset_password_task.py Feat/email register refactor (#25369) 2025-09-12 10:24:54 +08:00
ops_trace_task.py use model_validate (#26182) 2025-10-10 17:30:13 +09:00
process_tenant_plugin_autoupgrade_check_task.py perf: no longer record install count for auto upgrade (#33086) 2026-03-06 16:19:30 +08:00
recover_document_indexing_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
regenerate_summary_index_task.py feat(tasks): isolate summary generation to dedicated dataset_summary queue (#32972) 2026-03-06 14:35:28 +08:00
remove_app_and_related_data_task.py fix: redis for api token (#31861) 2026-02-06 16:25:27 +08:00
remove_document_from_index_task.py feat: Add summary index for knowledge. (#31625) 2026-01-29 13:47:35 +08:00
retry_document_indexing_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
sync_website_document_indexing_task.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
trigger_processing_tasks.py refactor(api): move workflow knowledge nodes and trigger nodes (#33445) 2026-03-15 15:24:59 +08:00
trigger_subscription_refresh_tasks.py refactor: use session factory instead of call db.session directly (#31198) 2026-01-21 13:43:06 +08:00
workflow_draft_var_tasks.py refactor: partition Celery task sessions into smaller, discrete execu… (#32085) 2026-02-08 21:01:54 +08:00
workflow_execution_tasks.py refactor: replace sa.String with EnumText in mapped_column for type s… (#33332) 2026-03-14 13:38:27 +09:00
workflow_node_execution_tasks.py refactor(api): move workflow knowledge nodes and trigger nodes (#33445) 2026-03-15 15:24:59 +08:00
workflow_schedule_tasks.py refactor(api): move workflow knowledge nodes and trigger nodes (#33445) 2026-03-15 15:24:59 +08:00