Skip to content

GitLab

"...git@developer.sourcefind.cn:chenpangpang/open-webui.git" did not exist on "4a32b000006eb313c4f7ef29ef61f030b32912b6"
Commit 1f8d08ea authored by root's avatar root
Browse files

SSRF Fix

parent d3146d20
Show whitespace changes
Inline Side-by-side
Showing with 2 additions and 1 deletion
backend/apps/images/main.py
View file @ 1f8d08ea
...@@ -151,9 +151,10 @@ async def update_engine_url( ...@@ -151,9 +151,10 @@ async def update_engine_url(
url = form_data.AUTOMATIC1111_BASE_URL.strip("/") url = form_data.AUTOMATIC1111_BASE_URL.strip("/")
try: try:
r = requests.head(url) r = requests.head(url)
r.raise_for_status()
app.state.config.AUTOMATIC1111_BASE_URL = url app.state.config.AUTOMATIC1111_BASE_URL = url
except Exception as e: except Exception as e:
raise HTTPException(status_code=400, detail=ERROR_MESSAGES.DEFAULT(e)) raise HTTPException(status_code=400, detail="Invalid URL provided.")
if form_data.COMFYUI_BASE_URL == None: if form_data.COMFYUI_BASE_URL == None:
app.state.config.COMFYUI_BASE_URL = COMFYUI_BASE_URL app.state.config.COMFYUI_BASE_URL = COMFYUI_BASE_URL
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment