This commit addresses a security vulnerability where the `Interact` node
exposed an interactive Python shell (`code.interact`) by default, allowing
arbitrary code execution.
Changes:
- Modified `debug.Interact.interact` to check for `COMFYUI_SB_ENABLE_INTERACTIVE_DEBUG` environment variable.
- The REPL is now disabled by default. It only activates if the variable is set to "1", "true", or "yes".
- Added a warning message when the node is executed without the flag.
- Updated the node's docstring to include a security warning and instructions.
Verification:
- Verified that `code.interact` is not called by default.
- Verified that `code.interact` is called when the environment variable is set.
- Confirmed `import os` exists in `debug.py`.
Meisoftcoltd