Bugfix/update nodevm sandbox options, sanitize tablename (#3818)

* update nodevm sandbox options, sanitize tablename * sanitize file name when getFileFromStorage
2026-06-22 09:01:09 +03:00 · 2025-01-07 15:26:25 +00:00
parent 22801591da
commit 9a417bdc95
16 changed files with 269 additions and 76 deletions
@@ -318,7 +318,15 @@ class ChatflowTool extends StructuredTool {
            body: JSON.stringify(body)
        }

-        let sandbox = { $callOptions: options, $callBody: body }
+        let sandbox = {
+            $callOptions: options,
+            $callBody: body,
+            util: undefined,
+            Symbol: undefined,
+            child_process: undefined,
+            fs: undefined,
+            process: undefined
+        }

        const code = `
 const fetch = require('node-fetch');
@@ -349,7 +357,10 @@ try {
            require: {
                external: { modules: deps },
                builtin: builtinDeps
-            }
+            },
+            eval: false,
+            wasm: false,
+            timeout: 10000
        } as any

        const vm = new NodeVM(vmOptions)