Unverified Commit 8d7910ce authored by 僵尸浩's avatar 僵尸浩 Committed by GitHub
Browse files

disable follow_symlinks in static serving for security reason (#2902)

parent 4a7e751c
...@@ -539,11 +539,11 @@ class PromptServer(): ...@@ -539,11 +539,11 @@ class PromptServer():
for name, dir in nodes.EXTENSION_WEB_DIRS.items(): for name, dir in nodes.EXTENSION_WEB_DIRS.items():
self.app.add_routes([ self.app.add_routes([
web.static('/extensions/' + urllib.parse.quote(name), dir, follow_symlinks=True), web.static('/extensions/' + urllib.parse.quote(name), dir),
]) ])
self.app.add_routes([ self.app.add_routes([
web.static('/', self.web_root, follow_symlinks=True), web.static('/', self.web_root),
]) ])
def get_queue_info(self): def get_queue_info(self):
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment