Austin/dify
1
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2024-11-16 03:32:23 +08:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

chore: address security alerts on braces escape and KaTeX (#3301)

Browse Source
This commit is contained in:
Nite Knite 2024-04-10 16:16:24 +08:00 committed by GitHub
parent 14bb0b02ac
commit 4c1cfd9278
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/app/components/base/prompt-editor/plugins/variable-value-block/index.tsx
View File

@ -31,7 +31,7 @@ const VariableValueBlock = () => {
if (matchArr === null)
return null
const hashtagLength = matchArr[3].length + 4
const hashtagLength = matchArr[0].length
const startOffset = matchArr.index
const endOffset = startOffset + hashtagLength
return {

2
web/app/components/base/prompt-editor/plugins/variable-value-block/utils.ts
View File

@ -1,5 +1,5 @@
export function getHashtagRegexString(): string {
const hashtag = '(\{)(\{)([a-zA-Z_][a-zA-Z0-9_]{0,29})(\})(\})'
const hashtag = '\\{\\{[a-zA-Z_][a-zA-Z0-9_]{0,29}\\}\\}'
return hashtag
}

2
web/package.json
View File

@ -44,7 +44,7 @@
"immer": "^9.0.19",
"js-audio-recorder": "^1.0.7",
"js-cookie": "^3.0.1",
"katex": "^0.16.7",
"katex": "^0.16.10",
"lamejs": "^1.2.1",
"lexical": "^0.12.2",
"lodash-es": "^4.17.21",

9
web/yarn.lock
View File

@ -4092,13 +4092,20 @@ jsonc-eslint-parser@^2.0.4, jsonc-eslint-parser@^2.1.0:
object.assign "^4.1.4"
object.values "^1.1.6"
katex@^0.16.0, katex@^0.16.7:
katex@^0.16.0:
version "0.16.8"
resolved "https://registry.npmjs.org/katex/-/katex-0.16.8.tgz"
integrity sha512-ftuDnJbcbOckGY11OO+zg3OofESlbR5DRl2cmN8HeWeeFIV7wTXvAOx8kEjZjobhA+9wh2fbKeO6cdcA9Mnovg==
dependencies:
commander "^8.3.0"
katex@^0.16.10:
version "0.16.10"
resolved "https://registry.yarnpkg.com/katex/-/katex-0.16.10.tgz#6f81b71ac37ff4ec7556861160f53bc5f058b185"
integrity sha512-ZiqaC04tp2O5utMsl2TEZTXxa6WSC4yo0fv5ML++D3QZv/vx2Mct0mTlRx3O+uUkjfuAgOkzsCmq5MiUEsDDdA==
dependencies:
commander "^8.3.0"
khroma@^2.0.0:
version "2.0.0"
resolved "https://registry.npmjs.org/khroma/-/khroma-2.0.0.tgz"