7 Commits

Author	SHA1	Message	Date
Matt Miller	ae4fcaaf41	security: fix five vulnerabilities (GHSA-779p-m5rp-r4h4) ... - CVE-2026-56670: force download of SVG/XML responses on /view to prevent stored XSS - CVE-2026-56671: contain /experiment/models/preview reads within the model folder - CVE-2026-56672: stop inline rendering of uploaded /userdata/{file} content - CVE-2026-56673: prevent path traversal in get_annotated_filepath (LoadImage /prompt input) - CVE-2026-56674: reject opaque/null Origin to close the CSRF middleware bypass Adds regression tests under tests-unit/security_test/ covering all five.	2026-07-02 19:10:30 -07:00
comfyanonymous	da49b7d0b6	Remove useless annotations imports. (#14105)	2026-05-25 19:23:29 -07:00
comfyanonymous	65cfcf5b1b	New Year ruff cleanup. (#11595)	2026-01-01 22:06:14 -05:00
Johnpaul Chiwetelu	3dfefc88d0	API for Recently Used Items (#8792) ... * feat: add file creation time to model file metadata and user file info * fix linting	2025-08-01 22:02:06 -04:00
comfyanonymous	b504bd606d	Add ruff rule for empty line with trailing whitespace.	2024-12-28 05:23:08 -05:00
catboxanon	3cacd3fca5	Support preview images embedded in safetensors metadata (#6119) ... * Support preview images embedded in safetensors metadata * Add unit test for safetensors embedded image previews	2024-12-19 14:01:56 -08:00
Hayden	5747bc6457	Optimize model library (#5841) ... * Move model manager routes * Add experiment model manager api * Fix cache causing returns to be empty * Fix unable to compare sub-dir caches * Skip non-existent folders * Add model preview * Revert 'Move model manager routes' * move model_filemanager.py to app/ * Update model_manager.py 3.8 compatibility ---------	2024-12-11 18:12:04 -05:00