With ComfyUI started with --listen, other devices could use most of AMB's actions: delete and rename models, save and delete workflows and prompts, start downloads and scans, export a backup of all data, translate with the user's key, change settings, switch the plugin version. A probe of all routes as a LAN device found 9 of 112 refusing. api/local_guard.py is one middleware in front of every /anomalous/ route: anything but GET answers only this computer unless it is a read sent as POST (OPEN_POSTS); a GET is open unless it is more than a read (LOCAL_GETS: backup file, GitHub releases, local folders). Local = loopback peer, no proxy headers, loopback Host (DNS rebinding is refused too). Refusals are 403 local_only with a bilingual message; GET /anomalous/access lets the page show a "view only" chip (remote_view.js). AGENTS.md rule 4 now names it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
23 lines
1.4 KiB
CSS
23 lines
1.4 KiB
CSS
@import url("./styles/00-foundation-models.css?v=20261003-settings-1");
|
|
@import url("./styles/01-shell-tools.css?v=20261003-settings-1");
|
|
@import url("./styles/02-notebooks.css?v=20261009-click-1");
|
|
@import url("./styles/03-gallery-recipes.css?v=20261009-click-1");
|
|
@import url("./styles/04-dialogs-materials.css?v=20261004-studio-1");
|
|
@import url("./styles/05-recipe-studio-overrides.css?v=20261002-theme-1");
|
|
@import url("./styles/06-material-workbench.css?v=20261004-studio-1");
|
|
@import url("./styles/07-prompt-studio.css?v=20261004-studio-1");
|
|
@import url("./styles/08-theme-gallery-overrides.css?v=20261004-studio-1");
|
|
@import url("./styles/09-prompt-drawers.css?v=20261004-studio-1");
|
|
@import url("./styles/10-model-sources.css?v=20261002-sources-1");
|
|
@import url("./styles/11-audio-studio.css?v=20261002-voiceover-2");
|
|
@import url("./styles/12-tts-setup.css?v=20261002-theme-1");
|
|
@import url("./styles/13-script-director.css?v=20261002-voiceover-2");
|
|
@import url("./styles/14-version-manager.css?v=20261002-theme-1");
|
|
@import url("./styles/15-shell-rail.css?v=20261012-remote");
|
|
@import url("./styles/16-activity.css?v=20261002-theme-1");
|
|
@import url("./styles/17-model-types.css?v=20261002-theme-1");
|
|
@import url("./styles/18-scan-page.css?v=20261003-folders-1");
|
|
@import url("./styles/19-model-doctor.css?v=20261005-mute-1");
|
|
@import url("./styles/20-current-node.css?v=20261004-studio-1");
|
|
@import url("./styles/21-prompt-studio.css?v=20261004-draftx-1");
|