Public/automatic
1
0
Fork 0
mirror of https://github.com/vladmandic/automatic synced 2026-09-19 17:24:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(civitai): accept civitai.red urls in header peek

Browse Source 
The .red mirror rewrites downloadUrl to its own host; normalize to
civitai.com so the ssrf guard, cache hash and fetch host agree.
This commit is contained in:
CalamitousFelicitousness
2026-07-11 15:11:57 +01:00
parent d005ac5aa1
commit c54c0535c0
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/civitai/api_civitai.py
+4 -1
View File
@@ -301,8 +301,11 @@ def get_peek_header(url: str, file_id: int = 0):
import json
import struct
from modules import shared
# civitai.red serves the same download service and rewrites downloadUrl to
# its own host; normalize so the guard, cache hash and fetch host agree.
url = url.replace('https://civitai.red/', 'https://civitai.com/', 1)
if not url.startswith('https://civitai.com/'):
return JSONResponse(content={"error": "only civitai.com urls are allowed"}, status_code=400)
return JSONResponse(content={"error": "only civitai urls are allowed"}, status_code=400)
if file_id:
cached = peek_cache_get(file_id, url)
if cached is not None: