mirror of
https://github.com/langgenius/dify.git
synced 2026-07-15 01:17:04 +08:00
Validate user_code against a [A-Z0-9-] charset before placing it in the /device redirect, closing the CodeQL url-redirection finding (the value can no longer carry path/scheme separators). Split the compound assert flagged by ruff PT018.