ComfyUI/tests-unit/server_test
Varun Chawla 2657155dfc
fix: block Windows drive-qualified paths in path traversal validation
PurePosixPath doesn't understand Windows drive letters, so paths like
C:/Windows/secret.png or C:secret.png would pass validation but escape
the output directory when joined via os.path.join on Windows.

Add PureWindowsPath check to detect drive-qualified paths on all
platforms. Added tests for Windows drive absolute, relative, and
backslash path variants.
2026-03-24 21:39:24 -07:00
..
test_cache_control.py fix: use no-store cache headers to prevent stale frontend chunks (#12911) 2026-03-14 18:25:09 -04:00
test_view_endpoint.py fix: block Windows drive-qualified paths in path traversal validation 2026-03-24 21:39:24 -07:00