Addresses maintainer review feedback on Comfy-Org/ComfyUI-Manager#3183.
Path traversal:
- Add _confine_to_base(), which resolves the real path (following symlinks)
and verifies it stays inside the ComfyUI root directory. Applied to
folder_path, log_folder and output_folder.
- Previously an absolute path was trusted verbatim and relative paths could
escape via '..', allowing a graph to read arbitrary files and to write or
delete .json files anywhere the server could reach.
- Log clearing now only removes JSON files previously written by this node
(validated by the 'prompt_file' key) instead of every .json in the folder.
UI localization:
- Node display name and all widget labels are now English.
ReSerendipity