opensource/dify
2
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-05-06 10:06:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(web): secure external form help links (#35751)

Browse Source
This commit is contained in:
aliworksx08 2026-05-04 03:18:28 -06:00 committed by GitHub
parent cd9daef564
commit d92c336394
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
15 changed files with 21 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/app/components/workflow/block-selector/market-place-plugin/action.tsx
View File

@ -96,7 +96,7 @@ const OperationDropdown: FC<Props> = ({
className="system-md-regular"
href={getMarketplaceUrl(`/plugins/${author}/${name}`, { theme })}
target="_blank"
rel="noreferrer"
rel="noopener noreferrer"
>
{t('operation.viewDetails', { ns: 'common' })}
</DropdownMenuLinkItem>

3
web/app/components/workflow/block-selector/market-place-plugin/list.tsx
View File

@ -82,6 +82,7 @@ const List = ({
className="sticky bottom-0 z-10 flex h-8 cursor-pointer items-center rounded-b-lg border-[0.5px] border-t border-components-panel-border bg-components-panel-bg-blur px-4 py-1 system-sm-medium text-text-accent-light-mode-only shadow-lg"
href={getMarketplaceUrl('', { category })}
target="_blank"
rel="noopener noreferrer"
>
<span>{t('findMoreInMarketplace', { ns: 'plugin' })}</span>
<RiArrowRightUpLine className="ml-0.5 h-3 w-3" />
@ -102,6 +103,7 @@ const List = ({
<Link
href={urlWithSearchText}
target="_blank"
rel="noopener noreferrer"
className="flex items-center text-text-accent-light-mode-only"
onClick={e => e.stopPropagation()}
>
@ -124,6 +126,7 @@ const List = ({
<Link
href={urlWithSearchText}
target="_blank"
rel="noopener noreferrer"
className="flex h-4 shrink-0 items-center system-sm-medium text-text-accent-light-mode-only"
>
<RiSearchLine className="mr-0.5 h-3 w-3" />

1
web/app/components/workflow/nodes/_base/components/agent-strategy.tsx
View File

@ -266,6 +266,7 @@ export const AgentStrategy = memo((props: AgentStrategyProps) => {
href={docLink('/use-dify/nodes/agent')}
className="text-text-accent-secondary"
target="_blank"
rel="noopener noreferrer"
>
{t('nodes.agent.learnMore', { ns: 'workflow' })}
</Link>

1
web/app/components/workflow/nodes/_base/components/error-handle/fail-branch-card.tsx
View File

@ -21,6 +21,7 @@ const FailBranchCard = () => {
<a
href={docLink('/use-dify/debug/error-type')}
target="_blank"
rel="noopener noreferrer"
className="text-text-accent"
>
{t('common.learnMore', { ns: 'workflow' })}

2
web/app/components/workflow/nodes/_base/components/help-link.tsx
View File

@ -26,7 +26,7 @@ const HelpLink = ({
aria-label={label}
href={link}
target="_blank"
rel="noreferrer"
rel="noopener noreferrer"
className="mr-1 flex h-6 w-6 items-center justify-center rounded-md hover:bg-state-base-hover"
>
<span aria-hidden className="i-ri-book-open-line h-4 w-4 text-gray-500" />

2
web/app/components/workflow/nodes/_base/components/panel-operator/panel-operator-popup.tsx
View File

@ -162,6 +162,7 @@ const PanelOperatorPopup = ({
<a
href={`/app/${workflowAppId}/workflow`}
target="_blank"
rel="noopener noreferrer"
className="flex h-8 cursor-pointer items-center rounded-lg px-3 text-sm text-text-secondary hover:bg-state-base-hover"
>
{t('panel.openWorkflow', { ns: 'workflow' })}
@ -178,6 +179,7 @@ const PanelOperatorPopup = ({
<a
href={nodeMetaData.helpLinkUri}
target="_blank"
rel="noopener noreferrer"
className="flex h-8 cursor-pointer items-center rounded-lg px-3 text-sm text-text-secondary hover:bg-state-base-hover"
>
{t('panel.helpLink', { ns: 'workflow' })}

1
web/app/components/workflow/nodes/_base/components/switch-plugin-version.tsx
View File

@ -95,6 +95,7 @@ export const SwitchPluginVersion: FC<SwitchPluginVersionProps> = (props) => {
className="flex items-center justify-center gap-1"
href={getMarketplaceUrl(`/plugins/${pluginDetail.declaration.author}/${pluginDetail.declaration.name}`)}
target="_blank"
rel="noopener noreferrer"
>
<span className="system-xs-regular text-xs text-text-accent">
{t('nodes.agent.installPlugin.changelog', { ns: 'workflow' })}

2
web/app/components/workflow/nodes/document-extractor/panel.tsx
View File

@ -66,7 +66,7 @@ const Panel: FC<NodePanelProps<DocExtractorNodeType>> = ({
/>
<div className="mt-1 py-0.5 body-xs-regular text-text-tertiary">
{t(`${i18nPrefix}.supportFileTypes`, { ns: 'workflow', types: supportTypesShowNames })}
<a className="text-text-accent" href={link} target="_blank">{t(`${i18nPrefix}.learnMore`, { ns: 'workflow' })}</a>
<a className="text-text-accent" href={link} target="_blank" rel="noopener noreferrer">{t(`${i18nPrefix}.learnMore`, { ns: 'workflow' })}</a>
</div>
</>
</Field>

1
web/app/components/workflow/nodes/template-transform/panel.tsx
View File

@ -77,6 +77,7 @@ const Panel: FC<NodePanelProps<TemplateTransformNodeType>> = ({
className="flex h-[18px] items-center space-x-0.5 text-xs font-normal text-text-tertiary"
href="https://jinja.palletsprojects.com/en/3.1.x/templates/"
target="_blank"
rel="noopener noreferrer"
>
<span>{t(`${i18nPrefix}.codeSupportTip`, { ns: 'workflow' })}</span>
<RiQuestionLine className="h-3 w-3" />

2
web/app/components/workflow/note-node/note-editor/plugins/link-editor-plugin/component.tsx
View File

@ -135,7 +135,7 @@ const LinkEditorComponent = ({
className="flex h-6 items-center rounded-md px-2 hover:bg-state-base-hover"
href={escape(url)}
target="_blank"
rel="noreferrer"
rel="noopener noreferrer"
>
<RiExternalLinkLine className="mr-1 h-3 w-3" />
<div className="mr-1">

1
web/app/components/workflow/run/node.tsx
View File

@ -232,6 +232,7 @@ const NodePanel: FC<Props> = ({
<a
href={docLink('/use-dify/debug/error-type')}
target="_blank"
rel="noopener noreferrer"
className="text-text-accent"
>
{t('common.learnMore', { ns: 'workflow' })}

2
web/app/components/workflow/run/status.tsx
View File

@ -212,6 +212,7 @@ const StatusPanel: FC<ResultProps> = ({
<a
href={docLink('/use-dify/debug/error-type')}
target="_blank"
rel="noopener noreferrer"
className="text-text-accent"
>
{t('common.learnMore', { ns: 'workflow' })}
@ -244,6 +245,7 @@ const StatusPanel: FC<ResultProps> = ({
key={url}
href={url}
target="_blank"
rel="noopener noreferrer"
className="system-xs-medium text-text-accent"
>
{url}

1
web/app/components/workflow/variable-inspect/right.tsx
View File

@ -241,6 +241,7 @@ const Right = ({
<a
href={fullContent?.download_url}
target="_blank"
rel="noopener noreferrer"
>
<RiFileDownloadFill className="size-4" />
</a>

5
web/app/education-apply/education-apply-page.tsx
View File

@ -123,11 +123,11 @@ const EducationApplyAge = () => {
<div className="mb-1 system-md-regular text-text-tertiary">
{t('form.terms.desc.front', { ns: 'education' })}
&nbsp;
<a href="https://dify.ai/terms" target="_blank" className="text-text-secondary hover:underline">{t('form.terms.desc.termsOfService', { ns: 'education' })}</a>
<a href="https://dify.ai/terms" target="_blank" rel="noopener noreferrer" className="text-text-secondary hover:underline">{t('form.terms.desc.termsOfService', { ns: 'education' })}</a>
&nbsp;
{t('form.terms.desc.and', { ns: 'education' })}
&nbsp;
<a href="https://dify.ai/privacy" target="_blank" className="text-text-secondary hover:underline">{t('form.terms.desc.privacyPolicy', { ns: 'education' })}</a>
<a href="https://dify.ai/privacy" target="_blank" rel="noopener noreferrer" className="text-text-secondary hover:underline">{t('form.terms.desc.privacyPolicy', { ns: 'education' })}</a>
{t('form.terms.desc.end', { ns: 'education' })}
</div>
<div className="py-2 system-md-regular text-text-primary">
@ -161,6 +161,7 @@ const EducationApplyAge = () => {
className="flex items-center system-xs-regular text-text-accent"
href={docLink('/use-dify/workspace/subscription-management#dify-for-education')}
target="_blank"
rel="noopener noreferrer"
>
{t('learn', { ns: 'education' })}
<RiExternalLinkLine className="ml-1 h-3 w-3" />

2
web/app/education-apply/verify-state-modal.tsx
View File

@ -101,7 +101,7 @@ function Confirm({
<div className="flex items-center gap-1">
{showLink && (
<>
<a onClick={handleClick} href={eduDocLink} target="_blank" className="cursor-pointer system-xs-regular text-text-accent">{t('learn', { ns: 'education' })}</a>
<a onClick={handleClick} href={eduDocLink} target="_blank" rel="noopener noreferrer" className="cursor-pointer system-xs-regular text-text-accent">{t('learn', { ns: 'education' })}</a>
<RiExternalLinkLine className="h-3 w-3 text-text-accent" />
</>
)}