diff --git a/packages/components/nodes/tools/MCP/core.ts b/packages/components/nodes/tools/MCP/core.ts index 36a26608909..6b6c447292b 100644 --- a/packages/components/nodes/tools/MCP/core.ts +++ b/packages/components/nodes/tools/MCP/core.ts @@ -246,7 +246,7 @@ export const validateCommandInjection = (args: string[]): void => { } export const validateEnvironmentVariables = (env: Record): void => { - const dangerousEnvVars = ['PATH', 'LD_LIBRARY_PATH', 'DYLD_LIBRARY_PATH'] + const dangerousEnvVars = ['PATH', 'LD_LIBRARY_PATH', 'DYLD_LIBRARY_PATH', 'NODE_OPTIONS'] for (const [key, value] of Object.entries(env)) { if (dangerousEnvVars.includes(key)) { diff --git a/packages/server/src/utils/index.ts b/packages/server/src/utils/index.ts index f0b1b35df08..f8b228e0c08 100644 --- a/packages/server/src/utils/index.ts +++ b/packages/server/src/utils/index.ts @@ -1189,10 +1189,7 @@ export const replaceInputsWithConfig = ( continue } } else { - // Skip if it is an override "files" input, such as pdfFile, txtFile, etc - if (typeof overrideConfig[config] === 'string' && overrideConfig[config].includes('FILE-STORAGE::')) { - // pass - } else if (!isParameterEnabled(flowNodeData.label, config)) { + if (!isParameterEnabled(flowNodeData.label, config)) { // Only proceed if the parameter is enabled continue }