ComfyUI/tests-unit/app_test
Dr.Lt.Data ba8dec6669 feat(security): add System User protection with __ prefix
Add protected namespace for custom nodes to store sensitive data
(API keys, licenses) that cannot be accessed via HTTP endpoints.

Key changes:
- New API: get_system_user_directory() for internal access
- New API: get_public_user_directory() with structural blocking
- 3-layer defense: header validation, path blocking, creation prevention
- 54 tests covering security, edge cases, and backward compatibility

System Users use `__` prefix (e.g., __system, __cache) following
Python's private member convention. They exist in user_directory/
but are completely blocked from /userdata HTTP endpoints.
2025-11-29 00:49:05 +09:00
..
__init__.py Add FrontendManager to manage non-default front-end impl (#3897) 2024-07-16 11:26:11 -04:00
custom_node_manager_test.py [i18n] Add /i18n endpoint to provide all custom node translations (#6558) 2025-01-22 17:15:45 -05:00
frontend_manager_test.py Add workflow templates version tracking to system_stats (#9089) 2025-09-26 21:29:13 -07:00
model_manager_test.py Support preview images embedded in safetensors metadata (#6119) 2024-12-19 14:01:56 -08:00
user_manager_system_user_test.py feat(security): add System User protection with __ prefix 2025-11-29 00:49:05 +09:00