alphard/ComfyUI-Lora-Manager
1
0
Fork 0
mirror of https://github.com/willmiao/ComfyUI-Lora-Manager.git synced 2026-03-25 23:25:43 -03:00
Code Issues Packages Projects Releases Wiki Activity

feat: add path validation for model folder in ExampleImagesFileManager

Browse Source
This commit is contained in:
Will Miao
2025-08-05 07:35:19 +08:00
parent 33c83358b0
commit b0c2027a1c
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
py/utils/example_images_file_manager.py
View File

@@ -43,6 +43,14 @@ class ExampleImagesFileManager:
# Construct folder path for this model # Construct folder path for this model
model_folder = os.path.join(example_images_path, model_hash) model_folder = os.path.join(example_images_path, model_hash)
model_folder = os.path.abspath(model_folder) # Get absolute path
# Path validation: ensure model_folder is under example_images_path
if not model_folder.startswith(os.path.abspath(example_images_path)):
return web.json_response({
'success': False,
'error': 'Invalid model folder path'
}, status=400)
# Check if folder exists # Check if folder exists
if not os.path.exists(model_folder): if not os.path.exists(model_folder):