Blackoutta 57d476d4e2 feat: apply markdown rendering to HITL email, sanitize email subject and body (#32305) ...

This PR:

1. Fixes the bug that email body of `HumanInput` node are sent as-is, without markdown rendering or sanitization
2. Applies HTML sanitization to email subject and body
3. Removes `\r` and `\n` from email subject to prevent SMTP header injection

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

2026-03-16 16:52:46 +08:00

..

annotation

refactor: partition Celery task sessions into smaller, discrete execu… (#32085)

2026-02-08 21:01:54 +08:00

app_generate

perf(api): utilize the message_workflow_run_id_idx while querying messages (#32944)

2026-03-04 14:11:14 +08:00

rag_pipeline

refactor: reuse redis connection instead of create new one (#32678)

2026-03-09 15:53:21 +08:00

workflow_cfs_scheduler

feat: introduce trigger functionality (#27644)

2025-11-12 17:59:37 +08:00

__init__.py

feat: mypy for all type check (#10921)

2024-12-24 18:38:51 +08:00

add_document_to_index_task.py

feat: Add summary index for knowledge. (#31625)

2026-01-29 13:47:35 +08:00

async_workflow_tasks.py

refactor: move workflow package to dify_graph (#32844)

2026-03-02 18:42:30 +08:00

batch_clean_document_task.py

perf: use batch delete method instead of single delete (#32036)

2026-02-06 15:12:32 +08:00

batch_create_segment_to_index_task.py

refactor(api): move model_runtime into dify_graph (#32858)

2026-03-02 20:15:32 +08:00

clean_dataset_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

clean_document_task.py

refactor: partition Celery task sessions into smaller, discrete execu… (#32085)

2026-02-08 21:01:54 +08:00

clean_notion_document_task.py

refactor: document_indexing_sync_task split db session (#32129)

2026-02-09 17:12:16 +08:00

create_segment_to_index_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

deal_dataset_index_update_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

deal_dataset_vector_index_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

delete_account_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

delete_conversation_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

delete_segment_from_index_task.py

perf: use batch delete method instead of single delete (#32036)

2026-02-06 15:12:32 +08:00

disable_segment_from_index_task.py

feat: Add summary index for knowledge. (#31625)

2026-01-29 13:47:35 +08:00

disable_segments_from_index_task.py

feat: Add summary index for knowledge. (#31625)

2026-01-29 13:47:35 +08:00

document_indexing_sync_task.py

fix: serialize data_source_info with json.dumps in Notion sync task (#32747)

2026-03-01 19:37:51 +08:00

document_indexing_task.py

refactor: reuse redis connection instead of create new one (#32678)

2026-03-09 15:53:21 +08:00

document_indexing_update_task.py

refactor: document_indexing_update_task split database session (#32105)

2026-02-09 10:49:23 +08:00

duplicate_document_indexing_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

enable_segment_to_index_task.py

feat: Add summary index for knowledge. (#31625)

2026-01-29 13:47:35 +08:00

enable_segments_to_index_task.py

feat: Add summary index for knowledge. (#31625)

2026-01-29 13:47:35 +08:00

generate_summary_index_task.py

feat(tasks): isolate summary generation to dedicated dataset_summary queue (#32972)

2026-03-06 14:35:28 +08:00

human_input_timeout_tasks.py

refactor: human input node decouple db (#32900)

2026-03-04 13:18:32 +08:00

mail_account_deletion_task.py

remove bare list, dict, Sequence, None, Any (#25058)

2025-09-06 03:32:23 +08:00

mail_change_mail_task.py

remove bare list, dict, Sequence, None, Any (#25058)

2025-09-06 03:32:23 +08:00

mail_email_code_login.py

remove bare list, dict, Sequence, None, Any (#25058)

2025-09-06 03:32:23 +08:00

mail_human_input_delivery_task.py

feat: apply markdown rendering to HITL email, sanitize email subject and body (#32305)

2026-03-16 16:52:46 +08:00

mail_inner_task.py

fix: remote code execution in email endpoints (#25753)

2025-09-18 16:45:34 +08:00

mail_invite_member_task.py

remove bare list, dict, Sequence, None, Any (#25058)

2025-09-06 03:32:23 +08:00

mail_owner_transfer_task.py

remove bare list, dict, Sequence, None, Any (#25058)

2025-09-06 03:32:23 +08:00

mail_register_task.py

Feat/email register refactor (#25369)

2025-09-12 10:24:54 +08:00

mail_reset_password_task.py

Feat/email register refactor (#25369)

2025-09-12 10:24:54 +08:00

ops_trace_task.py

use model_validate (#26182)

2025-10-10 17:30:13 +09:00

process_tenant_plugin_autoupgrade_check_task.py

perf: no longer record install count for auto upgrade (#33086)

2026-03-06 16:19:30 +08:00

recover_document_indexing_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

regenerate_summary_index_task.py

feat(tasks): isolate summary generation to dedicated dataset_summary queue (#32972)

2026-03-06 14:35:28 +08:00

remove_app_and_related_data_task.py

fix: redis for api token (#31861)

2026-02-06 16:25:27 +08:00

remove_document_from_index_task.py

feat: Add summary index for knowledge. (#31625)

2026-01-29 13:47:35 +08:00

retry_document_indexing_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

sync_website_document_indexing_task.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

trigger_processing_tasks.py

refactor(api): move workflow knowledge nodes and trigger nodes (#33445)

2026-03-15 15:24:59 +08:00

trigger_subscription_refresh_tasks.py

refactor: use session factory instead of call db.session directly (#31198)

2026-01-21 13:43:06 +08:00

workflow_draft_var_tasks.py

refactor: partition Celery task sessions into smaller, discrete execu… (#32085)

2026-02-08 21:01:54 +08:00

workflow_execution_tasks.py

refactor: replace sa.String with EnumText in mapped_column for type s… (#33332)

2026-03-14 13:38:27 +09:00

workflow_node_execution_tasks.py

refactor(api): move workflow knowledge nodes and trigger nodes (#33445)

2026-03-15 15:24:59 +08:00

workflow_schedule_tasks.py

refactor(api): move workflow knowledge nodes and trigger nodes (#33445)

2026-03-15 15:24:59 +08:00