liu an 20ab6aad4a Fix: patch SSTI vulnerability in template rendering (#7905) ...

### What problem does this PR solve?

[[Critical] RagFlow has a SSTI, which can lead to Remote Code Execution
(RCE).](https://github.com/infiniflow/ragflow/security/advisories/GHSA-mrf5-7w8r-8x88#event-463508)

### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)

2025-05-28 11:47:22 +08:00

..

__init__.py

Feat: add code agent component (#7672)

2025-05-16 10:27:47 +08:00

akshare.py

Import akshare lazzily. (#4708)

2025-02-05 12:04:11 +08:00

answer.py

Code refactor. (#4291)

2024-12-30 18:38:51 +08:00

arxiv.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

baidu.py

Fix baidu request error (#7799)

2025-05-23 09:48:55 +08:00

baidufanyi.py

Fix BaiduFanyi TestRun parameter validation and debug method missing … (#4275)

2024-12-30 10:34:57 +08:00

base.py

add show debug (#7390)

2025-05-12 17:15:19 +08:00

begin.py

Support debug components. (#3994)

2024-12-11 19:23:59 +08:00

bing.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

categorize.py

add show debug (#7390)

2025-05-12 17:15:19 +08:00

code.py

Fix: catch non-begin component output (#7827)

2025-05-23 20:29:23 +08:00

concentrator.py

Format: dos2unix (#4467)

2025-01-13 18:19:01 +08:00

crawler.py

Fix potential SSRF attack vulnerability (#4334)

2025-01-02 18:45:45 +08:00

deepl.py

Fix errors detected by Ruff (#3918)

2024-12-08 14:21:12 +08:00

duckduckgo.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

email.py

Fix: Email error. (#6701)

2025-04-01 10:37:04 +08:00

exesql.py

Fix backquotes in text2sql causing execution errors (#7793)

2025-05-23 09:49:45 +08:00

generate.py

Feat: Support tool calling in Generate component (#7572)

2025-05-16 16:32:19 +08:00

github.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

google.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

googlescholar.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

invoke.py

Feat: add data type invoke (#5126)

2025-02-27 16:15:33 +08:00

iteration.py

Add iteration for agent. (#4258)

2024-12-27 11:38:33 +08:00

iterationitem.py

Feat: apply LLM to optimize citations. (#5935)

2025-03-11 19:56:21 +08:00

jin10.py

Format: dos2unix (#4467)

2025-01-13 18:19:01 +08:00

keyword.py

add show debug (#7390)

2025-05-12 17:15:19 +08:00

message.py

Add graphrag (#1793)

2024-08-02 18:51:14 +08:00

pubmed.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

qweather.py

Fix component qweather (#2240)

2024-09-04 17:53:11 +08:00

relevant.py

Component debugging funcionality. (#4012)

2024-12-13 08:50:32 +08:00

retrieval.py

Removed the "USER:" in the question, reducing the accuracy of the search (#7852)

2025-05-27 16:58:18 +08:00

rewrite.py

Refa: make Rewrite component effective to relative data expression. (#5752)

2025-03-07 13:48:13 +08:00

switch.py

Fix: swich follow interact issue. (#6279)

2025-03-19 17:30:12 +08:00

template.py

Fix: patch SSTI vulnerability in template rendering (#7905)

2025-05-28 11:47:22 +08:00

tushare.py

Format: dos2unix (#4467)

2025-01-13 18:19:01 +08:00

wencai.py

Format: dos2unix (#4467)

2025-01-13 18:19:01 +08:00

wikipedia.py

Use consistent log file names, introduced initLogger (#3403)

2024-11-14 17:13:48 +08:00

yahoofinance.py

Format: dos2unix (#4467)

2025-01-13 18:19:01 +08:00