From 6f6798ddabe10d320fe8ea05edf0fdcef0c51a8e Mon Sep 17 00:00:00 2001
From: AUTOMATIC <16777216c@gmail.com>
Date: Sun, 9 Oct 2022 12:33:37 +0300
Subject: [PATCH] prevent a possible code execution error (thanks, RyotaK)

---
 modules/ui.py | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/modules/ui.py b/modules/ui.py
index e1ab26658..dad509f3a 100644
--- a/modules/ui.py
+++ b/modules/ui.py
@@ -1153,6 +1153,15 @@ def create_ui(wrap_gradio_gpu_call):
     component_dict = {}
 
     def open_folder(f):
+        if not os.path.isdir(f):
+            print(f"""
+WARNING
+An open_folder request was made with an argument that is not a folder.
+This could be an error or a malicious attempt to run code on your computer.
+Requested path was: {f}
+""", file=sys.stderr)
+            return
+
         if not shared.cmd_opts.hide_ui_dir_config:
             path = os.path.normpath(f)
             if platform.system() == "Windows":