Files
ComfyAssets-ComfyUI_PromptM…/py/api
Vito Sansevero 29e2bfd9ef fix(inspect): realpath containment for the exact-path node table route
inspection-semantics.json now goes through the same realpath check as
every other static file, so a symlink out of web/ is refused. The
forbidden-path test asserts exactly 403.
2026-10-22 19:09:59 -07:00
..