mirror of
https://github.com/Comfy-Org/ComfyUI-Manager.git
synced 2026-05-08 16:12:35 +08:00
Defense-in-depth over GET→POST alone: reject the three CORS-safelisted simple-form Content-Types (x-www-form-urlencoded, multipart/form-data, text/plain) on 16 no-body POST handlers (glob + legacy) to block <form method=POST> CSRF that bypasses method-only gating. Move comfyui_switch_version to a JSON body so the preflight requirement applies. Split db_mode/policy/update/channel_url_list into GET(read) + POST(write). Tighten do_fix (high → high+) and gate three previously-ungated config setters at middle. Resynchronize openapi.yaml (27 paths, 30 operations, ComfyUISwitchVersionParams as a shared $ref component). Add E2E harness variants, Playwright config, CSRF/secgate suites, 39-endpoint coverage, and a CHANGELOG. Breaking: legacy per-op POST routes (install/uninstall/fix/disable/update/ reinstall/abort_current) are removed; callers already use queue/batch. Legacy /manager/notice (v1) is removed; /v2/manager/notice is retained. Reported-by: XlabAI Team of Tencent Xuanwu Lab CVSS: 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) |
||
|---|---|---|
| .. | ||
| dev | ||
| en | ||
| guide | ||
| ko | ||
| README.md | ||
ComfyUI-Manager: Documentation
This directory contains documentation for the ComfyUI-Manager, providing guides and tutorials for users in multiple languages.
Directory Structure
The documentation is organized into language-specific directories:
- en/: English documentation
- ko/: Korean documentation
Core Documentation Files
Command-Line Interface
- cm-cli.md: Documentation for the ComfyUI-Manager Command Line Interface (CLI), which allows using manager functionality without the UI.
Advanced Features
- use_aria2.md: Guide for using the aria2 download accelerator with ComfyUI-Manager for faster model downloads.
Documentation Standards
The documentation follows these standards:
- Markdown Format: All documentation is written in Markdown for easy rendering on GitHub and other platforms
- Language-specific Directories: Content is separated by language to facilitate localization
- Feature-focused Documentation: Each major feature has its own documentation file
- Updated with Releases: Documentation is kept in sync with software releases
Contributing to Documentation
When contributing new documentation:
- Place files in the appropriate language directory
- Use clear, concise language appropriate for the target audience
- Include examples where helpful
- Consider adding screenshots or diagrams for complex features
- Maintain consistent formatting with existing documentation
This documentation directory will continue to grow to support the expanding feature set of ComfyUI-Manager.