mirror of
https://github.com/Comfy-Org/ComfyUI-Manager.git
synced 2026-05-09 16:42:32 +08:00
4410ebc6a6
Defense-in-depth over GET→POST alone: reject the three CORS-safelisted simple-form Content-Types (x-www-form-urlencoded, multipart/form-data, text/plain) on 16 no-body POST handlers (glob + legacy) to block <form method=POST> CSRF that bypasses method-only gating. Move comfyui_switch_version to a JSON body so the preflight requirement applies. Split db_mode/policy/update/channel_url_list into GET(read) + POST(write). Tighten do_fix (high → high+) and gate three previously-ungated config setters at middle. Resynchronize openapi.yaml (27 paths, 30 operations, ComfyUISwitchVersionParams as a shared $ref component). Add E2E harness variants, Playwright config, CSRF/secgate suites, 39-endpoint coverage, and a CHANGELOG. Breaking: legacy per-op POST routes (install/uninstall/fix/disable/update/ reinstall/abort_current) are removed; callers already use queue/batch. Legacy /manager/notice (v1) is removed; /v2/manager/notice is retained. Reported-by: XlabAI Team of Tencent Xuanwu Lab CVSS: 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
137 lines
3.1 KiB
Python
137 lines
3.1 KiB
Python
"""
|
|
Data models for ComfyUI Manager.
|
|
|
|
This package contains Pydantic models used throughout the ComfyUI Manager
|
|
for data validation, serialization, and type safety.
|
|
|
|
All models are auto-generated from the OpenAPI specification to ensure
|
|
consistency between the API and implementation.
|
|
"""
|
|
|
|
from .generated_models import (
|
|
# Core Task Queue Models
|
|
QueueTaskItem,
|
|
TaskHistoryItem,
|
|
TaskStateMessage,
|
|
TaskExecutionStatus,
|
|
|
|
# WebSocket Message Models
|
|
MessageTaskDone,
|
|
MessageTaskStarted,
|
|
MessageTaskFailed,
|
|
MessageUpdate,
|
|
ManagerMessageName,
|
|
|
|
# State Management Models
|
|
BatchExecutionRecord,
|
|
ComfyUISystemState,
|
|
BatchOperation,
|
|
InstalledNodeInfo,
|
|
InstalledModelInfo,
|
|
ComfyUIVersionInfo,
|
|
|
|
# Import Fail Info Models
|
|
ImportFailInfoBulkRequest,
|
|
ImportFailInfoBulkResponse,
|
|
ImportFailInfoItem,
|
|
ImportFailInfoItem1,
|
|
|
|
# Other models
|
|
OperationType,
|
|
OperationResult,
|
|
ManagerPackInfo,
|
|
ManagerPackInstalled,
|
|
SelectedVersion,
|
|
ManagerChannel,
|
|
ManagerDatabaseSource,
|
|
ManagerPackState,
|
|
ManagerPackInstallType,
|
|
ManagerPack,
|
|
InstallPackParams,
|
|
UpdatePackParams,
|
|
UpdateAllPacksParams,
|
|
UpdateComfyUIParams,
|
|
FixPackParams,
|
|
UninstallPackParams,
|
|
DisablePackParams,
|
|
EnablePackParams,
|
|
UpdateAllQueryParams,
|
|
UpdateComfyUIQueryParams,
|
|
ComfyUISwitchVersionParams,
|
|
QueueStatus,
|
|
ManagerMappings,
|
|
ModelMetadata,
|
|
NodePackageMetadata,
|
|
SnapshotItem,
|
|
Error,
|
|
InstalledPacksResponse,
|
|
HistoryResponse,
|
|
HistoryListResponse,
|
|
InstallType,
|
|
SecurityLevel,
|
|
RiskLevel,
|
|
)
|
|
|
|
__all__ = [
|
|
# Core Task Queue Models
|
|
"QueueTaskItem",
|
|
"TaskHistoryItem",
|
|
"TaskStateMessage",
|
|
"TaskExecutionStatus",
|
|
|
|
# WebSocket Message Models
|
|
"MessageTaskDone",
|
|
"MessageTaskStarted",
|
|
"MessageTaskFailed",
|
|
"MessageUpdate",
|
|
"ManagerMessageName",
|
|
|
|
# State Management Models
|
|
"BatchExecutionRecord",
|
|
"ComfyUISystemState",
|
|
"BatchOperation",
|
|
"InstalledNodeInfo",
|
|
"InstalledModelInfo",
|
|
"ComfyUIVersionInfo",
|
|
|
|
# Import Fail Info Models
|
|
"ImportFailInfoBulkRequest",
|
|
"ImportFailInfoBulkResponse",
|
|
"ImportFailInfoItem",
|
|
"ImportFailInfoItem1",
|
|
|
|
# Other models
|
|
"OperationType",
|
|
"OperationResult",
|
|
"ManagerPackInfo",
|
|
"ManagerPackInstalled",
|
|
"SelectedVersion",
|
|
"ManagerChannel",
|
|
"ManagerDatabaseSource",
|
|
"ManagerPackState",
|
|
"ManagerPackInstallType",
|
|
"ManagerPack",
|
|
"InstallPackParams",
|
|
"UpdatePackParams",
|
|
"UpdateAllPacksParams",
|
|
"UpdateComfyUIParams",
|
|
"FixPackParams",
|
|
"UninstallPackParams",
|
|
"DisablePackParams",
|
|
"EnablePackParams",
|
|
"UpdateAllQueryParams",
|
|
"UpdateComfyUIQueryParams",
|
|
"ComfyUISwitchVersionParams",
|
|
"QueueStatus",
|
|
"ManagerMappings",
|
|
"ModelMetadata",
|
|
"NodePackageMetadata",
|
|
"SnapshotItem",
|
|
"Error",
|
|
"InstalledPacksResponse",
|
|
"HistoryResponse",
|
|
"HistoryListResponse",
|
|
"InstallType",
|
|
"SecurityLevel",
|
|
"RiskLevel",
|
|
] |