From e0f1b03cf0146ba6a851b464df7b86b1cc7bca29 Mon Sep 17 00:00:00 2001 From: Harry Date: Mon, 13 Oct 2025 18:42:54 +0800 Subject: [PATCH] fix(trigger): clear subscription_id in trigger plugin processing - Updated the `AppDslService` to clear the `subscription_id` when processing nodes of type `TRIGGER_PLUGIN`. This change ensures that sensitive subscription data is not retained unnecessarily, enhancing data security during workflow execution. --- api/services/app_dsl_service.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/api/services/app_dsl_service.py b/api/services/app_dsl_service.py index 031cadcdc4..8bd786579f 100644 --- a/api/services/app_dsl_service.py +++ b/api/services/app_dsl_service.py @@ -607,6 +607,9 @@ class AppDslService: # clear the webhook_url node_data["webhook_url"] = "" node_data["webhook_debug_url"] = "" + if data_type == NodeType.TRIGGER_PLUGIN.value: + # clear the subscription_id + node_data["subscription_id"] = "" export_data["workflow"] = workflow_dict dependencies = cls._extract_dependencies_from_workflow(workflow)