diff --git a/nodes.py b/nodes.py index 0b8be765..d952d1c5 100644 --- a/nodes.py +++ b/nodes.py @@ -752,7 +752,7 @@ class SaveImage: full_output_folder = os.path.join(self.output_dir, subfolder) - if os.path.commonpath((self.output_dir, os.path.realpath(full_output_folder))) != self.output_dir: + if os.path.commonpath((self.output_dir, os.path.abspath(full_output_folder))) != self.output_dir: print("Saving image outside the output folder is not allowed.") return {} diff --git a/server.py b/server.py index 73429acc..e4f688cf 100644 --- a/server.py +++ b/server.py @@ -125,7 +125,7 @@ class PromptServer(): output_dir = os.path.join(os.path.dirname(os.path.realpath(__file__)), type) if "subfolder" in request.rel_url.query: full_output_dir = os.path.join(output_dir, request.rel_url.query["subfolder"]) - if os.path.commonpath((os.path.realpath(full_output_dir), output_dir)) != output_dir: + if os.path.commonpath((os.path.abspath(full_output_dir), output_dir)) != output_dir: return web.Response(status=403) output_dir = full_output_dir