Commit 57e4422b authored by AUTOMATIC1111's avatar AUTOMATIC1111 Committed by GitHub

Merge pull request #11806 from huchenlei/file_500

404 when thumb file not found
parents 47d9dd02 8c11b126
...@@ -8,6 +8,7 @@ from modules.ui import up_down_symbol ...@@ -8,6 +8,7 @@ from modules.ui import up_down_symbol
import gradio as gr import gradio as gr
import json import json
import html import html
from fastapi.exceptions import HTTPException
from modules.generation_parameters_copypaste import image_from_url_text from modules.generation_parameters_copypaste import image_from_url_text
...@@ -26,6 +27,9 @@ def register_page(page): ...@@ -26,6 +27,9 @@ def register_page(page):
def fetch_file(filename: str = ""): def fetch_file(filename: str = ""):
from starlette.responses import FileResponse from starlette.responses import FileResponse
if not os.path.isfile(filename):
raise HTTPException(status_code=404, detail="File not found")
if not any(Path(x).absolute() in Path(filename).absolute().parents for x in allowed_dirs): if not any(Path(x).absolute() in Path(filename).absolute().parents for x in allowed_dirs):
raise ValueError(f"File cannot be fetched: {filename}. Must be in one of directories registered by extra pages.") raise ValueError(f"File cannot be fetched: {filename}. Must be in one of directories registered by extra pages.")
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment