ReSerendipity
e1791e322e
Addresses maintainer review feedback on Comfy-Org/ComfyUI-Manager#3183. Path traversal: - Add _confine_to_base(), which resolves the real path (following symlinks) and verifies it stays inside the ComfyUI root directory. Applied to folder_path, log_folder and output_folder. - Previously an absolute path was trusted verbatim and relative paths could escape via '..', allowing a graph to read arbitrary files and to write or delete .json files anywhere the server could reach. - Log clearing now only removes JSON files previously written by this node (validated by the 'prompt_file' key) instead of every .json in the folder. UI localization: - Node display name and all widget labels are now English.
11 lines
258 B
Python
11 lines
258 B
Python
# Batch Prompt Loader
|
|
from .batch_prompt_loader import BatchPromptReaderWithClip
|
|
|
|
NODE_CLASS_MAPPINGS = {
|
|
"BatchPromptReaderWithClip": BatchPromptReaderWithClip,
|
|
}
|
|
|
|
NODE_DISPLAY_NAME_MAPPINGS = {
|
|
"BatchPromptReaderWithClip": "Batch Prompt Loader",
|
|
}
|