ComfyUI/tests-unit
Varun Chawla ae575a8670
security: handle Windows backslash path traversal in filename validation
Normalize backslashes to forward slashes before checking for path
traversal patterns, preventing attacks like `folder\..\secret` that
bypass forward-slash-only checks on Windows. Addresses review feedback
from light-and-ray on PR #12353.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-19 23:50:28 -08:00
..
app_test feat(security): add System User protection with __ prefix (#10966) 2025-11-28 21:28:42 -05:00
assets_test Assets Part 2 - add more endpoints (#12125) 2026-01-31 02:22:05 -05:00
comfy_api_test
comfy_extras_test [V3] converted nodes_images.py to V3 schema (#11206) 2025-12-26 19:39:02 -08:00
comfy_quant Properly save mixed ops. (#11772) 2026-01-10 02:03:57 -05:00
comfy_test
execution_test feat(preview): add per-queue live preview method override (#11261) 2025-12-15 15:57:39 -08:00
folder_paths_test feat(security): add System User protection with __ prefix (#10966) 2025-11-28 21:28:42 -05:00
prompt_server_test feat(security): add System User protection with __ prefix (#10966) 2025-11-28 21:28:42 -05:00
server/utils
server_test security: handle Windows backslash path traversal in filename validation 2026-02-19 23:50:28 -08:00
utils
feature_flags_test.py Support for async node functions (#8830) 2025-07-10 14:46:19 -04:00
README.md
requirements.txt Assets Part 2 - add more endpoints (#12125) 2026-01-31 02:22:05 -05:00
websocket_feature_flags_test.py Support for async node functions (#8830) 2025-07-10 14:46:19 -04:00

Pytest Unit Tests

Install test dependencies

pip install -r tests-unit/requirements.txt

Run tests

pytest tests-unit/