mlapointe
/
ComfyUI-Repo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Properly check upload filename for directory transversal.

Browse Source
main
comfyanonymous 1 year ago
parent e464fa8f04
commit d6d1a8998f
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File

4
server.py
Unescape Escape View File

@ -170,15 +170,15 @@ class PromptServer():
subfolder = post.get("subfolder", "") subfolder = post.get("subfolder", "")
full_output_folder = os.path.join(upload_dir, os.path.normpath(subfolder)) full_output_folder = os.path.join(upload_dir, os.path.normpath(subfolder))
filepath = os.path.join(full_output_folder, filename)
if os.path.commonpath((upload_dir, os.path.abspath(full_output_folder))) != upload_dir: if os.path.commonpath((upload_dir, os.path.abspath(filepath))) != upload_dir:
return web.Response(status=400) return web.Response(status=400)
if not os.path.exists(full_output_folder): if not os.path.exists(full_output_folder):
os.makedirs(full_output_folder) os.makedirs(full_output_folder)
split = os.path.splitext(filename) split = os.path.splitext(filename)
filepath = os.path.join(full_output_folder, filename)
if overwrite is not None and (overwrite == "true" or overwrite == "1"): if overwrite is not None and (overwrite == "true" or overwrite == "1"):
pass pass

Write Preview
Loading…
Cancel
Save