From 96f0adc0c6bb3ca36d3dbb956ef13bd27eb9cdc1 Mon Sep 17 00:00:00 2001 From: Mattabyte Date: Tue, 28 Jan 2025 14:17:04 +1000 Subject: [PATCH] Updated README --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 8a39cf9..719d4db 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,8 @@ Send a JSON message to the specified URL. Supports basic api key authentication. ## A Note on Security -99.99% of the time, you should use the prefix '$ENV.' to access the environment variables. This keeps your secrets out of the metadata of the output. +99.99% of the time, you should use the prefix '$ENV.' to access the environment variables for the api_url and api_auth fields. +This keeps your secrets out of the metadata of the output. **IF YOU DO NOT ADD THE --disable-metadata FLAG TO COMFYUI, THIS _WILL_ SPILL SECRETS IN THE METADATA OF THE OUTPUT.** **You must ensure that the metadata is not attached to _any_ outputs, as some nodes will not respect the --disable-metadata flag and will attach their own metadata.**