disable follow_symlinks in static serving for security reason (#2902)

9 months ago · 8d7910cee9
1 changed files with 2 additions and 2 deletions
--- a/server.py
+++ b/server.py
@ -539,11 +539,11 @@ class PromptServer():

        for name, dir in nodes.EXTENSION_WEB_DIRS.items():
            self.app.add_routes([
-                web.static('/extensions/' + urllib.parse.quote(name), dir, follow_symlinks=True),
+                web.static('/extensions/' + urllib.parse.quote(name), dir),
            ])

        self.app.add_routes([
-            web.static('/', self.web_root, follow_symlinks=True),
+            web.static('/', self.web_root),
        ])

    def get_queue_info(self):