GareArc f903b980ea fix(device-flow): bound user_code in error redirect + split compound assert ...

Validate user_code against a [A-Z0-9-] charset before placing it in the
/device redirect, closing the CodeQL url-redirection finding (the value
can no longer carry path/scheme separators). Split the compound assert
flagged by ruff PT018.

2026-06-29 20:14:52 -07:00

..

auth

refactor(api): enforce enums over string literals on openapi surface (#38009)

2026-06-26 05:48:21 +00:00

__init__.py

refactor(api): migrate response contract tooling to BaseModel (#37950)

2026-06-26 00:11:04 +00:00

_audit.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

_contract.py

feat: unified ErrorBody contract for /openapi/v1 and difyctl (#37285)

2026-06-11 10:26:27 +00:00

_errors.py

fix(hitl): stop confusing 404 when resuming forms via CLI (#37556)

2026-06-22 06:11:27 +00:00

_input_schema.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

_meta.py

refactor(openapi): unify request validation behind @accepts/@returns decorators (#37216)

2026-06-10 03:02:24 +00:00

_models.py

fix(app): derive get-app --mode whitelist from listable app types (#37761)

2026-06-23 04:40:05 +00:00

account.py

refactor(openapi): unify request validation behind @accepts/@returns decorators (#37216)

2026-06-10 03:02:24 +00:00

app_dsl.py

feat: guard openapi with rbac (#37752)

2026-06-22 09:35:33 +00:00

app_run.py

refactor(api): migrate response contract tooling to BaseModel (#37950)

2026-06-26 00:11:04 +00:00

apps_permitted_external.py

refactor(api): enforce enums over string literals on openapi surface (#38009)

2026-06-26 05:48:21 +00:00

apps.py

refactor(api): enforce enums over string literals on openapi surface (#38009)

2026-06-26 05:48:21 +00:00

files.py

feat: unified ErrorBody contract for /openapi/v1 and difyctl (#37285)

2026-06-11 10:26:27 +00:00

human_input_form.py

refactor(api): enforce enums over string literals on openapi surface (#38009)

2026-06-26 05:48:21 +00:00

index.py

refactor(openapi): unify request validation behind @accepts/@returns decorators (#37216)

2026-06-10 03:02:24 +00:00

oauth_device_sso.py

fix(device-flow): bound user_code in error redirect + split compound assert

2026-06-29 20:14:52 -07:00

oauth_device.py

refactor: fix OpenAPI contract generation schemas (#37387)

2026-06-12 14:25:53 +00:00

workflow_events.py

refactor(api): enforce enums over string literals on openapi surface (#38009)

2026-06-26 05:48:21 +00:00

workspaces.py

chore: make AccountService.load_user use passed session (#37764)

2026-06-24 07:29:12 +00:00