6 Commits
Author SHA1 Message Date
OrbisAI SecurityandClaude Sonnet 5 4609568dbf fix: address PR review comments on clean_path
Use os.sep instead of hardcoded '/' when splitting the relative path,
and clarify the invalid path error message.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-06 20:10:13 +05:30
anupamme ea1c0c381f fix: add path validation in utils_userdata.py
The clean_path function constructs file paths by joining path components without validating that the resulting path stays within the intended USERDATA directory
Addresses CWE-22
2026-10-06 03:24:08 +00:00
rgthree 2c5342a8cb Cache head branch for updating extensions from git. 2026-08-31 23:42:17 -04:00
rgthree a20c9aeebe Some enhancements for Power Lora Loader; Some None checks for lora info in server. Addresses #232 2024-05-21 20:52:20 -04:00
rgthree a8dceb0d7b Add in safetensors metadata (trained words, base model file). For #223 2024-05-17 21:51:25 -04:00
rgthree 2d7f3d5a20 Add an info dialog to right-click menu in Power Lora Loader with support for same-named images and civitai lookup. 2024-05-14 23:51:49 -04:00