jyapayne/dify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: introduce new env ALLOW_UNSAFE_DATA_SCHEME to allow rendering data uri scheme (#21321)

Browse source
This commit is contained in:
kurokobo 2025-07-09 11:12:40 +09:00 • committed by GitHub
commit e39236186d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 22 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
web/app/components/base/markdown-blocks/utils.ts
View file

@ -1,3 +1,7 @@
import { ALLOW_UNSAFE_DATA_SCHEME } from '@/config'
export const isValidUrl = (url: string): boolean => {
return ['http:', 'https:', '//', 'mailto:'].some(prefix => url.startsWith(prefix))
const validPrefixes = ['http:', 'https:', '//', 'mailto:']
if (ALLOW_UNSAFE_DATA_SCHEME) validPrefixes.push('data:')
return validPrefixes.some(prefix => url.startsWith(prefix))
}