fix(chat): 修复跨平台文件链接打开 - #321
Merged
Merged
Conversation
- 在 Markdown sanitize 前安全改写本地文件链接 - 统一桌面端与 Gateway Web 的点击打开链路 - 后端规范化路径并阻止脚本及可执行文件运行 - 补充解析、渲染、网关与安全策略测试
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
问题
聊天中的本地文件路径会经过通用 Markdown URL 安全策略,导致合法文件链接显示为
[blocked],桌面端和 Gateway WebUI 也缺少一致、安全的一键打开流程。修复
集成
a219478a578b39ef413bdd034a0ea43739f11f2ec8267a11e20c09ebbed15594e7076a8c3fd2cec5c9c9875130747b1f9fdd4c3612696f77d823aa24集成upstream/main的65caf803efcd92ea1b0ba8417d3d96bef39b1539,未重写上述提交验证
chat_file_linkstests: 5 passedcargo check --lib: passedgit diff --check: passedCargo.lock、Cargo.toml与无关未跟踪文件均未进入 PR