happyz
/
Fooocus
mirror of https://github.com/lllyasviel/Fooocus.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update bulk_enhance_helpers.py

This commit is contained in:
ChrisColeTech 2024-08-19 17:12:25 -04:00
parent 7a0b8eebb3
commit 2ab91c958a
1 changed files with 5 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
modules/bulk_enhance_helpers.py
View File

@ -76,18 +76,9 @@ def on_file_change(files, data_type):
def on_input_change(input_path, file_explorer):
def sanitize_path(path):
# Normalize the path to remove any '..' or redundant slashes
safe_path = os.path.normpath(path)
# Check for common malicious patterns
if ".." in safe_path or safe_path.startswith(("/", "\\")):
raise ValueError(
"Invalid path provided. Path traversal is not allowed.")
return safe_path
if input_path:
# Sanitize the input path
input_path = sanitize_path(input_path)
# Verify with normalised version of path
input_path = os.path.normpath(input_path)
if os.path.isdir(input_path):
# Return an empty list if input_path is a directory
@ -105,15 +96,14 @@ def on_input_change(input_path, file_explorer):
file_paths_list = input_path.strip("()").replace("'", "").split(", ")
# Extract file names and ensure uniqueness
for path in file_paths_list:
sanitized_path = sanitize_path(path)
file_name = os.path.basename(sanitized_path)
unique_file_paths[file_name] = sanitized_path
file_name = os.path.basename(path)
unique_file_paths[file_name] = path
# Process file_explorer items if provided
if file_explorer:
# Extract 'orig_name' from each file_explorer object and ensure uniqueness
for item in file_explorer:
sanitized_path = sanitize_path(item.orig_name)
sanitized_path = item.orig_name
file_name = os.path.basename(sanitized_path)
# Store the path, replacing any existing path with the same file name
unique_file_paths[file_name] = sanitized_path