| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
update python lint check Signed-off-by: dongjiang <dongjiang1989@126.com> | 6 个月前 | |
feat(mcp): add Streamable HTTP with SSE fallback (#1552) * feat(mcp): support Streamable HTTP transport Signed-off-by: onatozmenn <onatozmen44@gmail.com> * fix(mcp): address transport review feedback Signed-off-by: onatozmenn <onatozmen44@gmail.com> --------- Signed-off-by: onatozmenn <onatozmen44@gmail.com> | 3 个月前 | |
Apply suggestion from @gemini-code-assist[bot] Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Signed-off-by: tony quan <136245549+ggfgtonyquan@users.noreply.github.com> | 7 个月前 | |
fix(security): prevent SSRF in outbound plugin requests (#1669) * fix(security): prevent SSRF in outbound plugin requests Validate URLs, resolved addresses, redirects, and download targets across the console, link plugin, and AI tools. Preserve only narrowly scoped internal storage access and add regression coverage for rebinding and parser edge cases. Signed-off-by: yjlu12 <1064690083@qq.com> * chore(console): apply Spotless formatting Signed-off-by: yjlu12 <1064690083@qq.com> --------- Signed-off-by: yjlu12 <1064690083@qq.com> | 2 个月前 | |
fix: resolve Python CI formatting failures and fix workflow unittest (#1185) * resolve Python CI formatting failures and fix workflow unittest Signed-off-by: dongjiang <dongjiang1989@126.com> * fix make check-python Signed-off-by: dongjiang <dongjiang1989@126.com> * Update core/workflow/infra/providers/llm/google/google_chat_llm.py Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Signed-off-by: dongjiang <dongjiang2010@gmail.com> * Update core/workflow/tests/infra/providers/llm/test_chat_ai_factory.py Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Signed-off-by: dongjiang <dongjiang2010@gmail.com> * fix unittest case Signed-off-by: dongjiang <dongjiang1989@126.com> --------- Signed-off-by: dongjiang <dongjiang1989@126.com> Signed-off-by: dongjiang <dongjiang2010@gmail.com> Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> | 6 个月前 | |
refactor: optimize link tests and code-check | 1 年前 | |
update python lint check Signed-off-by: dongjiang <dongjiang1989@126.com> | 6 个月前 | |
fix(security): apply outbound policy to MCP tool URLs (#1676) * fix(security): apply outbound policy to MCP tool URLs MCP tool_list and call_tool still used the string-only local and blacklist checks, and the streamable HTTP client followed redirects. Route those URLs through the same OutboundPolicy as the HTTP tool executor, validate resolved addresses, and disable redirect following. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> * fix(security): address MCP outbound policy review notes Resolve DNS off the event loop, map blacklist vs local errors from OutboundPolicyError.blocked instead of message text, and document the remaining check-then-connect window on the MCP transport. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> * Format the SSRF guard and MCP tests with black. Check core-link wants black 24.4.2 on these two files. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> --------- Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> | 21 天前 | |
fix(security): apply outbound policy to MCP tool URLs (#1676) * fix(security): apply outbound policy to MCP tool URLs MCP tool_list and call_tool still used the string-only local and blacklist checks, and the streamable HTTP client followed redirects. Route those URLs through the same OutboundPolicy as the HTTP tool executor, validate resolved addresses, and disable redirect following. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> * fix(security): address MCP outbound policy review notes Resolve DNS off the event loop, map blacklist vs local errors from OutboundPolicyError.blocked instead of message text, and document the remaining check-then-connect window on the MCP transport. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> * Format the SSRF guard and MCP tests with black. Check core-link wants black 24.4.2 on these two files. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> --------- Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> | 21 天前 | |
fix(security): apply outbound policy to MCP tool URLs (#1676) * fix(security): apply outbound policy to MCP tool URLs MCP tool_list and call_tool still used the string-only local and blacklist checks, and the streamable HTTP client followed redirects. Route those URLs through the same OutboundPolicy as the HTTP tool executor, validate resolved addresses, and disable redirect following. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> * fix(security): address MCP outbound policy review notes Resolve DNS off the event loop, map blacklist vs local errors from OutboundPolicyError.blocked instead of message text, and document the remaining check-then-connect window on the MCP transport. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> * Format the SSRF guard and MCP tests with black. Check core-link wants black 24.4.2 on these two files. Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> --------- Signed-off-by: Sasha Mitchell <sash.t.mitchell@gmail.com> | 21 天前 | |
fix(link): fix x-display response visibility filtering | 7 个月前 | |
refactor(link):optimize kafka send | 8 个月前 | |
refactor(link):optimize the link dockerfile | 1 年前 | |
fix(link):Resolve the high complexity issue in flake8. | 1 年前 | |
feat(link):complete alembic migration for link service Signed-off-by: congquan <congquan@iflytek.com> | 7 个月前 | |
fix(security): prevent SSRF in outbound plugin requests (#1669) * fix(security): prevent SSRF in outbound plugin requests Validate URLs, resolved addresses, redirects, and download targets across the console, link plugin, and AI tools. Preserve only narrowly scoped internal storage access and add regression coverage for rebinding and parser edge cases. Signed-off-by: yjlu12 <1064690083@qq.com> * chore(console): apply Spotless formatting Signed-off-by: yjlu12 <1064690083@qq.com> --------- Signed-off-by: yjlu12 <1064690083@qq.com> | 2 个月前 | |
fix(core-link): mock create_engine in database initialization unit tests (#1184) * add create_engine mocking to these two tests Signed-off-by: dongjiang <dongjiang1989@126.com> * fix lint Signed-off-by: dongjiang <dongjiang1989@126.com> --------- Signed-off-by: dongjiang <dongjiang1989@126.com> | 6 个月前 | |
fix(security): prevent SSRF in outbound plugin requests (#1669) * fix(security): prevent SSRF in outbound plugin requests Validate URLs, resolved addresses, redirects, and download targets across the console, link plugin, and AI tools. Preserve only narrowly scoped internal storage access and add regression coverage for rebinding and parser edge cases. Signed-off-by: yjlu12 <1064690083@qq.com> * chore(console): apply Spotless formatting Signed-off-by: yjlu12 <1064690083@qq.com> --------- Signed-off-by: yjlu12 <1064690083@qq.com> | 2 个月前 | |
fix(link):Modify the unique key constraint for the Tools table. | 7 个月前 | |
fix(security): prevent SSRF in outbound plugin requests (#1669) * fix(security): prevent SSRF in outbound plugin requests Validate URLs, resolved addresses, redirects, and download targets across the console, link plugin, and AI tools. Preserve only narrowly scoped internal storage access and add regression coverage for rebinding and parser edge cases. Signed-off-by: yjlu12 <1064690083@qq.com> * chore(console): apply Spotless formatting Signed-off-by: yjlu12 <1064690083@qq.com> --------- Signed-off-by: yjlu12 <1064690083@qq.com> | 2 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 6 个月前 | ||
| 3 个月前 | ||
| 7 个月前 | ||
| 2 个月前 | ||
| 6 个月前 | ||
| 1 年前 | ||
| 6 个月前 | ||
| 21 天前 | ||
| 21 天前 | ||
| 21 天前 | ||
| 7 个月前 | ||
| 8 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 7 个月前 | ||
| 2 个月前 | ||
| 6 个月前 | ||
| 2 个月前 | ||
| 7 个月前 | ||
| 2 个月前 |