Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(editor): Prevent XSS in node-issues tooltip #9490

Merged
merged 1 commit into from
May 22, 2024
Merged

fix(editor): Prevent XSS in node-issues tooltip #9490

merged 1 commit into from
May 22, 2024

Conversation

netroy
Copy link
Member

@netroy netroy commented May 22, 2024

Since TitledList renders items as html, we need to sanitize the items that we pass into it to display node issues in Node.vue.

Related tickets and issues

https://linear.app/n8n/issue/SEC-3

Review / Merge checklist

  • PR title and summary are descriptive
  • Tests included

@n8n-assistant n8n-assistant bot added n8n team Authored by the n8n team ui Enhancement in /editor-ui or /design-system labels May 22, 2024
@cypress Cypress
Copy link

cypress bot commented May 22, 2024 •
edited
Loading

2 flaky tests on run #5103 ↗︎

0 362 12 0 Flakiness 2

Details:

🌳 master 🖥️ browsers:node18.12.0-chrome107 🤖 PR User 🗃️ e2e/*
Project: n8n Commit: 301e846cf6
Status: Passed Duration: 04:45 💡
Started: May 23, 2024 3:10 AM Ended: May 23, 2024 3:15 AM
Flakiness  5-ndv.cy.ts • 1 flaky test

View Output Video

Test Artifacts
NDV > Stop listening for trigger event from NDV Screenshots Video
Flakiness  39-projects.cy.ts • 1 flaky test

View Output Video

Test Artifacts
Projects > should handle workflows and credentials and menu items Test Replay Screenshots Video

Review all test suite changes for PR #9490 ↗︎

@github-actions GitHub Actions
Copy link
Contributor

✅ All Cypress E2E specs passed

@netroy netroy merged commit 301e846 into master May 22, 2024
28 checks passed
@netroy netroy deleted the fix-SEC-3 branch May 22, 2024 16:40
andyjoyous added a commit to eyaljoyous/n8n that referenced this pull request May 22, 2024
@andyjoyous @ahsanv
@tomi @michael-radency @OlegIvaniv @netroy @ivov @maspio @gandreini @Joffcom @github-actions @elsmr @despairblue @krynble @manninofrancesco @cyliu0 @StarfallProjects @MiloradFilipovic @bramkn @alexgrozav @ayatnkw @cstuncsik @RicardoE105 @pemontto @Nicolas-nwb @CodeShakingSheep @albertopasqualetto @csuermann @webkp @pengqiseven @yoshino-s @riascho @floryn90 @testwill @mjquinlan2000 @RJiraya @valya @hayashi-ay @mutdmour @ddzobov @GuilhermeBarile @CinGiu @meownoid
Merge 2024 05 22 (#59)
d9efde5 
* feat(editor): Remove cloud deployment check from settings route middlewareOptions (no-changelog) (n8n-io#9095)

* feat: Add telemetry event 'User clicked AI error helper button' (no-changelog) (n8n-io#9096)

* fix: Continue on fail / error output support for chains and agents (n8n-io#9078)

* fix(AWS Bedrock Chat Model Node): Improve filtering of Bedrock models & fix Claude 3 (n8n-io#9085)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(editor): Set `browser-id` on all relative urls (no-changelog) (n8n-io#9097)

* fix(core): Fix `isLeader` check in `WaitTracker` constructor (n8n-io#9100)

* feat(Postgres Node): Options keepAlive and keepAliveInitialDelayMillis (n8n-io#9067)

* fix(HTTP Request Node): Duplicate key names support for form data  (n8n-io#9040)

Co-authored-by: Marcus <marcus@n8n.io>

* fix(core): Some more browser-id related fixes (no-changelog) (n8n-io#9102)

* refactor(core): Remove unnecessary indirection in SAML code (no-changelog) (n8n-io#9103)

* feat(JWT Node): New node (n8n-io#9005)

Co-authored-by: Giulio Andreini <andreini@netseven.it>

* docs: Update wording for Advanced AI in nodes panel (n8n-io#9091)

* ci: Move docker-compose examples out of this repo (no-changelog) (n8n-io#9029)

* ci: Keep n8n-workflow version in sync with the main version (no-changelog) (n8n-io#9107)

* refactor(core): Lint for cyclomatic complexity in BE packages (no-changelog) (n8n-io#9111)

* 🚀 Release 1.37.0 (n8n-io#9114)

Co-authored-by: ivov <ivov@users.noreply.github.com>

* feat(editor): Add object keys that need bracket access to autocomplete (n8n-io#9088)

* fix(core): Upgrade `tar` to address CVE-2024-28863 (no-changelog) (n8n-io#9117)

* fix(core): Don't revert irreversibble migrations (n8n-io#9105)

* fix(editor): Do not show overlapping trash icon in the node's settings (n8n-io#9119)

* ci: Fix docs urls (no-changelog) (n8n-io#9116)

* fix(editor): Open links from embedded chat in new tab (n8n-io#9121)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(core): Support MySQL in `MoveSshKeysToDatabase` migration (n8n-io#9120)

* feat(Summarize Node): Option to continue when field to summarize can't be found in any items (n8n-io#9118)

* fix(editor): Render dates correctly in parameter hint (n8n-io#9089)

* fix(Respond to Webhook Node): Continue on fail and error branch support (n8n-io#9115)

* fix(core): Add an option to add additional non-ui routes (no-changelog) (n8n-io#9122)

* test: Run cypress e2e tests in light mode by default (no-changelog) (n8n-io#9123)

* fix(core): Don't create multiple owners when importing credentials or workflows (n8n-io#9112)

* ci: Revert keep n8n-workflow version in sync with the main version (no-changelog) (n8n-io#9139)

* fix(Gitlab Trigger Node): Fix typo (no-changelog) (n8n-io#9077)

* feat(Github Node): Add option to get pull requests (n8n-io#9094)

* docs: Update executions.id.yml to fix typo (n8n-io#9142)

* feat(Google Gemini Chat Model Node): Add support for new Google Gemini models (n8n-io#9130)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>
Co-authored-by: Michael Kret <michael.k@radency.com>

* fix: Fix issue with Crowdstrike credential not working correctly (n8n-io#9108)

* fix(HTTP Request Node): Tolerate header name being empty (n8n-io#9138)

* fix(Execute Workflow Node): Assign fallback pairedItem only if not present in output item and different length of input output  (n8n-io#9145)

* fix(HTTP Request Node): Proxy IPv6 hostname fix (no-changelog) (n8n-io#9149)

* ci: Sync up versions for all backend related packages

This is to avoid another bad release with the timezone bug PAY-1510

* 🚀 Release 1.38.0 (n8n-io#9153)

Co-authored-by: netroy <netroy@users.noreply.github.com>

* fix(Notion Node): Add itemIndex to API and operation errors (n8n-io#9150)

* feat(core): Upgrade mysql2 to address CVE-2024-21507, CVE-2024-21508, and CVE-2024-21509 (n8n-io#9154)

* fix(core): Exclude oAuth callback urls from browser-id checks (n8n-io#9158)

* feat(core): Setup helmet.js for setting security headers (n8n-io#9027)

* refactor: Refactor ParameterInput to composition API + fix all TS errors (no-changelog) (n8n-io#9006)

* fix(Schedule Trigger Node): Default to 0 minute if falsy on hourly run (n8n-io#9146)

* fix(Postgres Node): Convert js arrays to postgres type, if column type is ARRAY (n8n-io#9160)

* fix: Update sales templates card content (no-changelog) (n8n-io#9155)

* feat: Add WhatsApp Business Trigger Node (n8n-io#8840)

Co-authored-by: Giulio Andreini <andreini@netseven.it>
Co-authored-by: Michael Kret <michael.k@radency.com>

* fix(editor): Fix parameter reset on credential change in Discord node (n8n-io#9137)

* fix(core): Improve browserId checks, and add logging (n8n-io#9161)

* fix(core): Upgrade @n8n/typeorm (no-changelog) (n8n-io#9163)

Co-authored-by: कारतोफ्फेलस्क्रिप्ट™ <aditya@netroy.in>

* ci: Update isbang/compose-action and postgres in DB tests (no-changelog) (n8n-io#9165)

* feat(editor): Refactor and unify executions views (no-changelog) (n8n-io#8538)

* fix(editor): Fix expression preview when previous node is selected (n8n-io#9140)

* feat(n8n Form Trigger Node): Option to remove attribution (n8n-io#9162)

* fix(core): Cache issue (no-changelog) (n8n-io#9173)

* fix(Respond to Webhook Node): Fix issue stopping form trigger response (n8n-io#9157)

* fix(editor): Prevent duplicate values in preview for SQL editor (n8n-io#9129)

* feat(Zammad Node): Add more options to the Organizations endpoint  (n8n-io#9180)

* fix(editor): Fix sessionId for manual chat trigger execution (n8n-io#9187)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(Google Sheets Node): Fix "Append or Update" on an empty sheet (n8n-io#9175)

Co-authored-by: Michael Kret <michael.k@radency.com>

* test: Re-enable node IO filter test for pinned data (n8n-io#9200)

* fix(editor): Make sticky node content parameter non require to support empty stickies (n8n-io#9192)

* feat(Webhook Node): Setting to enable multiple outputs/methods (n8n-io#9086)

Co-authored-by: Giulio Andreini <andreini@netseven.it>

* fix(Splunk Node): Retry attempts if no response from API call, better error with suggestion to use Retry On Fail  (n8n-io#9176)

Co-authored-by: Elias Meire <elias@meire.dev>

* fix(core): Upgrade mysql2 to address CVE-2024-21511 (n8n-io#9206)

* fix(Google Gemini Chat Model Node): Ping @google/generative-ai version (no-changelog) (n8n-io#9184)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(Airtable Node): Do not allow to use deprecated api keys in v1 (n8n-io#9171)

* 🚀 Release 1.39.0 (n8n-io#9209)

Co-authored-by: RicardoE105 <RicardoE105@users.noreply.github.com>

* feat(HTTP Request Node): Option to provide SSL Certificates in Http Request Node (n8n-io#9125)

Co-authored-by: कारतोफ्फेलस्क्रिप्ट™ <aditya@netroy.in>

* fix(core): Fix browser session refreshes not working (n8n-io#9212)

Co-authored-by: कारतोफ्फेलस्क्रिप्ट™ <aditya@netroy.in>

* fix(Google Drive Node): Create from text operation (n8n-io#9185)

* fix(Discord Node): When using OAuth2 authentication, check if user is a guild member when sending direct message (n8n-io#9183)

* feat(Jira Software Node): Add Wiki Markup support for Jira Cloud comments (n8n-io#8857)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* feat(Gmail Node): Add thread option for draft emails (n8n-io#8729)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* feat(Gmail Node): Add support for creating drafts using an alias (n8n-io#8728)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* fix(core): Stop relying on filesystem for SSH keys (n8n-io#9217)

* fix(MySQL Node): Query to statements splitting fix (n8n-io#9207)

* feat(Wise Trigger Node): Add support for balance updates (n8n-io#9189)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* feat(Microsoft To Do Node): Add an option to set a reminder when updating a task (n8n-io#6918)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* feat(Pipedrive Node): Add busy and description options to activities (n8n-io#9208)

* feat(MISP Node): Rest search operations (n8n-io#9196)

* fix(editor): Throw expression error on attempting to set variables at runtime (n8n-io#9229)

* feat: Upgrade typeorm for separate sqlite read & write connections (n8n-io#9230)

* fix(editor): Fix read-only mode in inline expression editor (n8n-io#9232)

* fix(editor): Fix and report `settings` being `null` in workflow payloads (no-changelog) (n8n-io#9227)

* fix: Elaborate scope of Sustainable Use License (n8n-io#9233)

* refactor(editor): Migrate header WorkflowDetails to composition api (no-changelog) (n8n-io#9186)

* feat(Wise Node): Add XML as supported format in getStatement operation (n8n-io#9193)

* fix: Typo fixes in various descriptions (no-changelog) (n8n-io#8854)

Signed-off-by: pengqiseven <912170095@qq.com>
Co-authored-by: pengqiseven <i@sohu.com>

* fix(core): Add `view engine` to webhook server to support forms (n8n-io#9224)

* docs: Update link to postgres example (n8n-io#9244)

* feat(Ollama Chat Model Node): Add aditional Ollama config parameters & fix vision (n8n-io#9215)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>
Co-authored-by: Michael Kret <michael.k@radency.com>

* refactor(Structured Output Parser Node): Sandbox JSON schema parsing (no-changelog) (n8n-io#9239)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(OpenAI Node): Allow to pass files ids as comma separated string in expressions (no-changelog) (n8n-io#9240)

* refactor(core)!: Switch default Postgres user from `root` to `postgres` (n8n-io#9248)

* refactor(editor): Rewrite TabBar to composition API (no-changelog) (n8n-io#9231)

* refactor: Update Langchain dependencies (no-changelog) (n8n-io#9252)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* ci: Update release-push-to-channel.yml (no-changelog) (n8n-io#9254)

* feat(Groq Chat Model Node): Add support for Groq chat models  (n8n-io#9250)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>
Co-authored-by: Michael Kret <michael.k@radency.com>

* fix(core): Prevent node param resolution from failing telemetry graph generation (n8n-io#9257)

* fix(LangChain Code Node): Fix resolution of scoped langchain modules (n8n-io#9258)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(Customer.io Node): Update logo (no-changelog) (n8n-io#9262)

* fix(Baserow Node): Update logo (no-changelog) (n8n-io#9261)

* fix(editor): Prevent excess runs in manual execution with run data (n8n-io#9259)

* fix(LangChain Code Node): Fix execution of custom n8n tools called via LC code node (n8n-io#9265)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>
Co-authored-by: Michael Kret <michael.k@radency.com>

* fix(Jira Trigger Node): Update credentials UI (n8n-io#9198)

* feat(Telegram Node): Disable page preview by default (n8n-io#9267)

* feat(S3 Node): Add support for self signed SSL certificates (n8n-io#9269)

* feat(Postgres Node): Add option IS NOT NULL and hide value input fields (n8n-io#9241)

* fix(Google BigQuery Node): Better error messages, transform timestamps (n8n-io#9255)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* feat: Add Ask AI to HTTP Request Node (n8n-io#8917)

* 🚀 Release 1.40.0 (n8n-io#9286)

Co-authored-by: elsmr <elsmr@users.noreply.github.com>

* fix: Cast boolean values in filter parameter (n8n-io#9260)

* feat(Redis Node): Add support for TLS (n8n-io#9266)

* refactor(editor): Migrate `pushConnection` mixin to composable and remove collaboration store side effects (no-changelog) (n8n-io#9249)

* fix(n8n Form Trigger Node): Fix missing options when using respond to webhook (n8n-io#9282)

* fix(editor): Resolve `$vars` and `$secrets` in expressions in credentials fields (n8n-io#9289)

* fix(editor): Show MFA section to instance owner, even when external auth is enabled (n8n-io#9301)

* refactor(core): Use logger for `packages/cli` messages (no-changelog) (n8n-io#9302)

* fix(Gmail Node): Remove duplicate options when creating drafts (n8n-io#9299)

* fix(core): Prevent occassional 429s on license init in multi-main setup (n8n-io#9284)

* fix(editor): Fix type errors in the `SettingsLdapView.vue` (no-changelog) (n8n-io#9308)

* refactor(core): Rename `ActiveWorkflowRunner` to `ActiveWorkflowManager` (no-changelog) (n8n-io#9280)

* ci: Remove gulp (no-changelog) (n8n-io#9283)

Co-authored-by: Iván Ovejero <ivov.src@gmail.com>

* fix(editor): Fix shortcut issue on save buttons (n8n-io#9309)

* ci: Upgrade Turborepo to 1.13.3 (no-changelog) (n8n-io#9314)

* fix(core): Report missing SAML attributes early with an actionable error message (n8n-io#9316)

* fix(core): Webhooks responding with binary data should not prematurely end the response stream (n8n-io#9063)

* feat(editor): Implement AI Assistant chat UI (n8n-io#9300)

* feat(Send Email Node): Add an option to customize client host-name on SMTP connections (n8n-io#9322)

* fix(Pipedrive Node): Improve type-safety in custom-property handling (n8n-io#9319)

* fix(editor): Fix multi-select parameters with load options getting cleared (n8n-io#9324)

* feat(editor): Temporarily disable AI error helper (n8n-io#9329)

* ci: Increase timeout of MySQL tests (n8n-io#9332)

* feat(LinkedIn Node): Upgrade LinkedIn API version (n8n-io#9307)

* fix(Linear Node): Fix issue with data not always being returned (n8n-io#9273)

Co-authored-by: Michael Kret <michael.k@radency.com>

* feat(Slack Node): Update to use the new API method for file uploads (n8n-io#9323)

* fix(Read PDF Node): Disable JS evaluation from PDFs (n8n-io#9336)

* feat(Simulate Node): New node (no-changelog) (n8n-io#9109)

* refactor(editor): Migrate workflows store to setup function with composition API (no-changelog) (n8n-io#9270)

* 🚀 Release 1.41.0 (n8n-io#9342)

Co-authored-by: ivov <ivov@users.noreply.github.com>

* feat(editor): Remove AI Error Debugging (n8n-io#9337)

* fix(editor): Fix i18n usage in design-system (no-changelog) (n8n-io#9341)

* fix(core): All calls to `plainToInstance` should exclude extraneous values (no-changelog) (n8n-io#9338)

* perf: Add tailwind to editor and design system (n8n-io#9032)

* feat(editor): Add item selector to expression output (n8n-io#9281)

* feat(core): Node version available in expression (n8n-io#9350)

* fix(editor): Render backticks as code segments in error view (n8n-io#9352)

* feat(editor): Autocomplete info box: improve structure and add examples (n8n-io#9019)

Co-authored-by: Giulio Andreini <andreini@netseven.it>

* fix(editor): Fix unwanted side effects from tailwind components (no-changelog) (n8n-io#9359)

* feat(editor): Migrate `codemirror-lang-n8n-expression` into this monorepo (no-changelog) (n8n-io#9087)

Co-authored-by: Iván Ovejero <ivov.src@gmail.com>

* refactor: Implement LLM tracing callback to improve parsing of tokens usage stats (n8n-io#9311)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* refactor: Remove `cli/src/helpers` (no-changelog) (n8n-io#9368)

* feat(core): Node hints(warnings) system (n8n-io#8954)

* feat(editor): Add examples for number & boolean, add new methods (n8n-io#9358)

* ci: Do not hoist workspace packages in custom builds (no-changelog) (n8n-io#9388)

* fix(Code Node): Bind helper methods to the correct context (n8n-io#9380)

* fix(Mattermost Node): Fix issue when fetching reactions (n8n-io#9375)

* feat(editor): Add examples for object and array expression methods (n8n-io#9360)

Co-authored-by: Iván Ovejero <ivov.src@gmail.com>

* feat(core): Allow using a custom certificates in docker containers (n8n-io#8705)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* fix(editor): Temporarily disable tailwind (no-changelog) (n8n-io#9394)

* fix(Cortex Node): Fix issue with analyzer response not working for file observables (n8n-io#9374)

* fix: Small typo fix (no-changelog) (n8n-io#8876)

* feat(Slack Node): Add block support for message updates (n8n-io#8925)

* feat(AI Agent Node): Implement Tool calling agent (n8n-io#9339)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* 🚀 Release 1.42.0 (n8n-io#9405)

Co-authored-by: netroy <netroy@users.noreply.github.com>

* feat: Add Slack trigger node (n8n-io#9190)

Co-authored-by: Giulio Andreini <andreini@netseven.it>

* fix(Email Trigger (IMAP) Node): Handle attachments correctly (n8n-io#9410)

* fix(editor): Fix blank Public API page (n8n-io#9409)

* fix(editor): Secondary button in dark mode (n8n-io#9401)

* fix(editor): Fix outdated roles in variables labels (n8n-io#9411)

* fix(core): Add an option to disable STARTTLS for SMTP connections (n8n-io#9415)

* fix(core): Handle credential in body for oauth2 refresh token (n8n-io#9179)

Co-authored-by: कारतोफ्फेलस्क्रिप्ट™ <aditya@netroy.in>

* fix: PairedItems various fixes (no-changelog) (n8n-io#9357)

* fix(Microsoft OneDrive Trigger Node): Fix issue with test run failing (n8n-io#9386)

* fix(Mattermost Node): Change loadOptions to fetch all items (n8n-io#9413)

* fix(HubSpot Trigger Node): Fix issue with ticketId not being set (n8n-io#9403)

* feat(Extract from File Node): Add option to set encoding for CSV files (n8n-io#9392)

* feat(editor): Expand supported Unicode range for expressions (n8n-io#9420)

* feat(editor): Add examples for Luxon DateTime expression methods (n8n-io#9361)

Co-authored-by: Iván Ovejero <ivov.src@gmail.com>

* feat(OpenAI Node): Use v2 assistants API and add support for memory (n8n-io#9406)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(core): Do not report to Sentry trigger activation errors from `ETIMEDOUT` or `ECONNREFUSED` (no-changelog) (n8n-io#9379)

* fix(core): Retry before continue on fail (n8n-io#9395)

* fix(core): Remove excess args from routing error (n8n-io#9377)

* feat: RBAC (n8n-io#8922)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>
Co-authored-by: Val <68596159+valya@users.noreply.github.com>
Co-authored-by: कारतोफ्फेलस्क्रिप्ट™ <aditya@netroy.in>
Co-authored-by: Valya Bullions <valya@n8n.io>
Co-authored-by: Danny Martini <danny@n8n.io>
Co-authored-by: Danny Martini <despair.blue@gmail.com>
Co-authored-by: Iván Ovejero <ivov.src@gmail.com>
Co-authored-by: Omar Ajoue <krynble@gmail.com>
Co-authored-by: oleg <me@olegivaniv.com>
Co-authored-by: Michael Kret <michael.k@radency.com>
Co-authored-by: Michael Kret <88898367+michael-radency@users.noreply.github.com>
Co-authored-by: Elias Meire <elias@meire.dev>
Co-authored-by: Giulio Andreini <andreini@netseven.it>
Co-authored-by: Giulio Andreini <g.andreini@gmail.com>
Co-authored-by: Ayato Hayashi <go12limchangyong@gmail.com>

* fix(editor): Fix workflow history TS errors (n8n-io#9433)

* fix: Fix color picker type errors (n8n-io#9436)

* refactor: Fix TypeScript errors workflow package (n8n-io#9437)

* refactor(editor): Fix Types issues in @n8n/chat (no-changelog) (n8n-io#9438)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(editor): Fix RBAC type errors (no-changelog) (n8n-io#9435)

* fix(editor): Fix type errors in i18n plugin (n8n-io#9441)

* feat(editor): Update Node Details View header tabs structure (n8n-io#9425)

Co-authored-by: Elias Meire <elias@meire.dev>

* fix(HTML Node): Fix typo preventing row attributes from being set in tables (n8n-io#9440)

* fix(editor): Fix External secrets typecheck (no-changelog) (n8n-io#9434)

* refactor: Fix type errors in completions code (n8n-io#9439)

* refactor: Fix Enteprise type errors (n8n-io#9442)

* fix: Fix type errors in community nodes components (n8n-io#9445)

* refactor(editor): Fix types issues in `src/components/Node/*` (no-changelog) (n8n-io#9444)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(editor): Fix editor-ui tsconfig types for vue-tsc (no-changelog) (n8n-io#9446)

* fix(editor): Fix type errors in `components/executions/workflow` (n8n-io#9448)

* refactor(editor): Convert `workflowActivate`  mixin into a composable  (no-changelog) (n8n-io#9423)

* refactor(editor): Fix type errors in `NodeDetailsView.vue` (no-changelog) (n8n-io#9431)

* fix(editor): Fix i18n translation addition (n8n-io#9451)

* fix(core): Setup webhook stopping endpoint after the CORS middleware (no-changelog) (n8n-io#9454)

* ci: Delete unused code in some backend tests (no-changelog) (n8n-io#9456)

* fix: Init license properly with multi main (no-changelog) (n8n-io#9467)

* feat(Telegram Node): Add support for local bot api server (n8n-io#8437)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* refactor(editor): Fix type errors in ResourcesListLayout.vue (no-changelog) (n8n-io#9461)

* fix(Telegram Node): Revert typo introduced in n8n-io#8437 (no-changelog) (n8n-io#9472)

* refactor(editor): Refactor code completions mixins to composables (no-changelog) (n8n-io#9459)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(editor): Fix rundata type errors (no-changelog) (n8n-io#9443)

* refactor: Fix type issues for parameter input components (n8n-io#9449)

* fix(editor): Fix project settings layout (n8n-io#9475)

* fix(core): Fix 431 for large dynamic node parameters (n8n-io#9384)

* fix(editor): Fix design system typecheck errors (no-changelog) (n8n-io#9447)

* fix(editor): Fix type errors for various utils files (no-changelog) (n8n-io#9480)

* fix(editor): Emit change events from filter component on update (n8n-io#9479)

* feat(Strava Node): Update to use sport type (n8n-io#9462)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* fix(core): Fix typos in common error messages (no-changelog) (n8n-io#9478)

* feat(editor): Add examples for root expression methods (n8n-io#9373)

* fix(RSS Feed Trigger Node): Use newest date instead of first item for new items (n8n-io#9182)

Co-authored-by: Jonathan Bennetts <jonathan.bennetts@gmail.com>

* feat(Linear Node): Add identifier to outputs (n8n-io#9469)

* test: Add tests for license manager reinit method (n8n-io#9471)

* fix(Gmail Trigger Node): Fetching duplicate emails (n8n-io#9424)

* feat(core): Node hints improvements (no-changelog) (n8n-io#9387)

Co-authored-by: Giulio Andreini <andreini@netseven.it>

* fix: Update operations to run per item (n8n-io#8967)

Co-authored-by: Elias Meire <elias@meire.dev>

* feat(Custom n8n Workflow Tool Node): Add support for tool input schema (n8n-io#9470)

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>

* fix(core): Detect DB connection aquisition deadlocks (no-changelog) (n8n-io#9485)

Co-authored-by: Danny Martini <danny@n8n.io>

* fix(core): Account for retry of execution aborted by pre-execute hook (n8n-io#9474)

* fix(editor): Fix node execution errors showing undefined (n8n-io#9487)

* fix(editor): Project related frontend fixes (no-changelog) (n8n-io#9482)

* fix(core): Do not allow admins to generate password-reset links for instance owner (n8n-io#9488)

* fix(core): Do not allow admins to delete the instance owner (n8n-io#9489)

* refactor(core): Track potentially unneeded inferral of execution status (no-changelog) (n8n-io#9476)

* refactor(core): Make execution status non-nullable (no-changelog) (n8n-io#9483)

* ci: Skip the flaky test in SettingsSso.test.ts (no-changelog) (n8n-io#9481)

* perf(core): Optimize executions filtering by metadata (n8n-io#9477)

* fix(core): Fix iFrame not displaying on FE dev mode (no-changelog) (n8n-io#9492)

* 🚀 Release 1.43.0 (n8n-io#9491)

Co-authored-by: RicardoE105 <RicardoE105@users.noreply.github.com>

* refactor(core): Fix type errors in workflow, core, nodes-langchain, and nodes-base (no-changelog) (n8n-io#9450)

* fix(editor): Prevent XSS in node-issues tooltip (n8n-io#9490)

* Adds sleep before migration

* Fixes fetching workflow with version

---------

Signed-off-by: Oleg Ivaniv <me@olegivaniv.com>
Signed-off-by: pengqiseven <912170095@qq.com>
Co-authored-by: Ahsan Virani <ahsan.virani@gmail.com>
Co-authored-by: Tomi Turtiainen <10324676+tomi@users.noreply.github.com>
Co-authored-by: Michael Kret <88898367+michael-radency@users.noreply.github.com>
Co-authored-by: oleg <me@olegivaniv.com>
Co-authored-by: कारतोफ्फेलस्क्रिप्ट™ <netroy@users.noreply.github.com>
Co-authored-by: Iván Ovejero <ivov.src@gmail.com>
Co-authored-by: Marcus <marcus@n8n.io>
Co-authored-by: Giulio Andreini <andreini@netseven.it>
Co-authored-by: Jon <jonathan.bennetts@gmail.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: ivov <ivov@users.noreply.github.com>
Co-authored-by: Elias Meire <elias@meire.dev>
Co-authored-by: Danny Martini <danny@n8n.io>
Co-authored-by: Omar Ajoue <krynble@gmail.com>
Co-authored-by: Francesco Mannino <61598026+manninofrancesco@users.noreply.github.com>
Co-authored-by: Chengyou Liu <35356271+cyliu0@users.noreply.github.com>
Co-authored-by: Deborah <deborah@starfallprojects.co.uk>
Co-authored-by: Michael Kret <michael.k@radency.com>
Co-authored-by: कारतोफ्फेलस्क्रिप्ट™ <aditya@netroy.in>
Co-authored-by: Milorad FIlipović <milorad@n8n.io>
Co-authored-by: Bram Kn <bram@knitco.nl>
Co-authored-by: Alex Grozav <alex@grozav.com>
Co-authored-by: aya <15815271+ayatnkw@users.noreply.github.com>
Co-authored-by: Csaba Tuncsik <csaba@n8n.io>
Co-authored-by: Ricardo Espinoza <ricardo@n8n.io>
Co-authored-by: RicardoE105 <RicardoE105@users.noreply.github.com>
Co-authored-by: pemontto <939704+pemontto@users.noreply.github.com>
Co-authored-by: Nicolas-nwb <64306440+Nicolas-nwb@users.noreply.github.com>
Co-authored-by: CodeShakingSheep <19874562+CodeShakingSheep@users.noreply.github.com>
Co-authored-by: Alberto Pasqualetto <39854348+albertopasqualetto@users.noreply.github.com>
Co-authored-by: Cornelius Suermann <cornelius@n8n.io>
Co-authored-by: webk <webkp@users.noreply.github.com>
Co-authored-by: pengqiseven <134899215+pengqiseven@users.noreply.github.com>
Co-authored-by: pengqiseven <i@sohu.com>
Co-authored-by: Yoshino-s <cy-cui@outlook.com>
Co-authored-by: Ria Scholz <123465523+mariaremote@users.noreply.github.com>
Co-authored-by: elsmr <elsmr@users.noreply.github.com>
Co-authored-by: Florin Lungu <1656976+floryn90@users.noreply.github.com>
Co-authored-by: guangwu <guoguangwu@magic-shield.com>
Co-authored-by: Mike Quinlan <mquinlan@gigsmart.com>
Co-authored-by: Giulio Andreini <g.andreini@gmail.com>
Co-authored-by: Romain MARTINEAU <romartineau35@gmail.com>
Co-authored-by: Val <68596159+valya@users.noreply.github.com>
Co-authored-by: Valya Bullions <valya@n8n.io>
Co-authored-by: Danny Martini <despair.blue@gmail.com>
Co-authored-by: Ayato Hayashi <go12limchangyong@gmail.com>
Co-authored-by: Mutasem Aldmour <4711238+mutdmour@users.noreply.github.com>
Co-authored-by: Daniil Zobov <ddzobov@gmail.com>
Co-authored-by: Guilherme Barile <gbarile@bravado.com.br>
Co-authored-by: Giulio Cinelli <giulio.cinelli@gmail.com>
Co-authored-by: Egor Malykh <fnk@fea.st>
MiloradFilipovic added a commit that referenced this pull request May 24, 2024
@MiloradFilipovic
Merge branch 'master' into ADO-2220-agent-assistant-poc
de21a08 
* master:
  refactor(core): Use consistent CSRF state validation across oAuth controllers (#9104)
  feat(core): Print the name of the migration that cannot be reverted when using `n8n db:revert` (#9473)
  fix(editor): Hard load after logout to reset stores (no-changelog) (#9500)
  refactor(core): Stop reporting `EAUTH` error codes to Sentry (no-changelog) (#9496)
  fix(core): Upgrade sheetjs to address CVE-2024-22363 (#9498)
  refactor: Remove skipped tests (no-changelog) (#9497)
  feat(editor): Add initial code for NodeView and Canvas rewrite (no-changelog) (#9135)
  fix(editor): Show input panel with not connected message (#9495)
  fix(editor): Prevent XSS in node-issues tooltip (#9490)

# Conflicts:
#	pnpm-lock.yaml
RicardoE105 pushed a commit that referenced this pull request May 24, 2024
@netroy @RicardoE105
fix(editor): Prevent XSS in node-issues tooltip (#9490)
13489b6
@github-actions github-actions bot mentioned this pull request May 24, 2024
Merged
@janober
Copy link
Member

janober commented May 24, 2024

Got released with n8n@1.43.1

@github-actions github-actions bot mentioned this pull request May 30, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cstuncsik cstuncsik cstuncsik approved these changes

Assignees
No one assigned
Labels
n8n team Authored by the n8n team Released security ui Enhancement in /editor-ui or /design-system
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@netroy @janober @cstuncsik