🔐 Open Source Contributions — bytedance/deer-flow
| PR | 描述 | 状态 |
|---|---|---|
| #3488 | 修复前端用户消息气泡长文本溢出问题 | ✅ Merged |
| #3605 | 修复 SSE 序列化管道吞掉 interrupt 信号，恢复 human-in-the-loop 中断能力 | ✅ Merged |
| #3641 | 增强冒烟测试认证流程支持 | ✅ Merged |
| #3662 | 新建输入净化中间件转义用户输入中的框架保留标签，防御 prompt injection | ✅ Merged |
| #3661 | 设计角色隔离方案，将系统上下文注入为 SystemMessage 防止 prompt injection | ✅ Merged |
| #3697 | 过滤 hide_from_ui 的 HumanMessage 避免污染记忆构建 | ✅ Merged |
| #3711 | 合并多轮对话累积的 SystemMessage，修复严格后端 400 报错 | ✅ Merged |
| #3746 | 修复 ID-swap 消息替换的递归注入和摘要误压缩问题，补充 peer rescue 机制 | ✅ Merged |
| #3889 | 实现用户级自定义 Skill 隔离与沙箱挂载 | ✅ Merged |
| #4210 | 新增share inbound webhook dedupe across pods via Postgres | ✅ Merged |
| PR | Description | Status |
|---|---|---|
| #3488 | fix(frontend): prevent user message bubble overflow with long unbreakable strings | ✅ Merged |
| #3605 | fix(runtime): propagate interrupt through SSE values events for LangGraph SDK | ✅ Merged |
| #3641 | fix(smoke-test): add auth-aware frontend checks with login support | ✅ Merged |
| #3662 | fix(security): add input sanitization middleware for prompt-injection defense (#3630) | ✅ Merged |
| #3661 | fix(security): inject system context as SystemMessage for role isolation (#3630) | ✅ Merged |
| #3697 | fix(memory): filter hide_from_ui HumanMessages from memory builder | ✅ Merged |
| #3711 | fix(agents): coalesce SystemMessages before LLM request | ✅ Merged |
| #3746 | fix(middleware): prevent ID-swap recursive injection and orphan peer compression | ✅ Merged |
| #3889 | feat(skills): per-user custom skill isolation with sandbox mounting | ✅ Merged |
| #4210 | feat(channels): share inbound webhook dedupe across pods via Postgres | ✅ Merged |
