FlowiseAI/Flowise
1
0
Fork 0
mirror of https://github.com/FlowiseAI/Flowise.git synced 2026-10-12 10:09:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,436 Commits 860 Branches 307 Tags
Commit Graph
9 Commits
Author SHA1 Message Date
christopherholland-workdayandchristopherholland-workday aff06479aa Control Path Traversal Protections via Env Var (#5962) 
* Fix isPathTraversal method to be less strict

* Fix isPathTraversal method to be less strict

* Control isPathTraversal via an Env Var

* Path traversal check env var

---------

Co-authored-by: christopherholland-workday <[email protected]>
 2026-03-16 08:40:26 -07:00
chiragjaggaandHenry 07ef4bbec8 Add support for azure blob storage and storage refactor (#5604) 
* storageUtils functions azure storage

* interface, base and local storage provider

* s3 storage provider

* gcs, azure storage provider

* refactor final changes

* fix gcs path bug

* gemini and lint fixes

* documentation changes

* update pnpm lock

* update azure winston to ESM imports

---------

Co-authored-by: Henry <[email protected]>
 2026-03-04 21:58:08 +08:00
christopherholland-workday 219b040065 fix: Control default deny list via an env var (#5862) 
* Control default deny list via an env var

* fix: Control default deny list via an env var

---------
 2026-03-02 14:44:34 -08:00
Ilango 37ef6ffa50 fix: add missing log filter env variables to examples (#5376) 
* Sanitize sensitive fields in request header and body in logger

* fix: log request headers, body, and query only when debug logs are enabled

* fix: add missing env to examples

* fix: crash due to missing env vars
 2025-10-28 16:14:49 +05:30
Henry Heng a86f618186 Chore/Secure Cookies Env Variable (#5281) 
Enhanced cookie security handling in the passport middleware to allow explicit configuration of secure cookie settings.
 2025-10-01 11:54:07 +01:00
YauandHenry Heng b5da234ce7 Add environment variable control for trust proxy setting (#5226) 
* feat: allow trust proxy setting to be configured via environment variable

* fix: restore HTTP_DENY_LIST in .env.example after merge conflict

* feat: add conditional handling for trust proxy

* feat: add trust proxy environment variable documentation

* feat: add trust proxy environment variable sample value

* fix: handle empty trust proxy string in docker environment

---------

Co-authored-by: Henry Heng <[email protected]>
 2025-09-27 14:08:55 +01:00
Henry Heng 41131dfac3 Feat/Enhance security validation for MCP configurations (#5232) 
feat: enhance security validation for MCP configurations

- Added environment variable checks for CUSTOM_MCP_SECURITY_CHECK, CUSTOM_MCP_PROTOCOL, and HTTP_DENY_LIST across various Docker and application files.
- Implemented validation functions in MCP core to prevent command injection and ensure safe environment variable usage
 2025-09-18 14:37:31 +01:00
Henry Heng 42152dd036 Chore/Disable Available Dep By Default (#5231) 
disable available dependencies by default, only allow when ALLOW_BUILTIN_DEP is set to true
 2025-09-18 12:03:08 +01:00
Henry Heng 8ba1a09077 Bugfix/Update worker docker (#4643) 
update worker docker
 2025-06-12 17:25:43 +01:00