From a062f6f459263cb7e325bbd52f44a92ed9390d04 Mon Sep 17 00:00:00 2001 From: millerlight Date: Mon, 11 Aug 2025 04:59:50 +0200 Subject: [PATCH] Update custom-node-list.json In v1.0.0 I now strictly enforce a registry-backed whitelist: POST /kvtools/peek only serves values for (file_name, key) that exist in kv_registry.json (basename-only, path traversal blocked via abspath().startswith(BASE_DIR)). Image serving is scoped to the allowed root (optional extension whitelist), no arbitrary paths. UI changes no longer trigger automatic runs. --- custom-node-list.json | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/custom-node-list.json b/custom-node-list.json index ff2b64f0d..04e8caa4f 100755 --- a/custom-node-list.json +++ b/custom-node-list.json @@ -31191,6 +31191,16 @@ ], "install_type": "unzip", "description": "This is a node to convert an image into a CMYK Halftone dot image." + }, + { + "author": "millerlight", + "title": "Key-Value KV-Tools for ComfyUI", + "reference": "https://github.com/millerlight/ComfyUI-KVTools", + "files": [ + "https://github.com/millerlight/ComfyUI-KVTools" + ], + "install_type": "git-clone", + "description": "Nodes for JSON Key/Value (KV) storage with on-the-fly UI preview, dynamic drop-downs, random selection, and inline edit mode." } ] }