From e9f63d6c577589fa78cc310f0fe8108da88f41ce Mon Sep 17 00:00:00 2001 From: James Pine Date: Mon, 16 Mar 2026 03:43:37 -0700 Subject: [PATCH] reject model migration to subdirectory of source cache --- backend/routes/models.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/backend/routes/models.py b/backend/routes/models.py index 573c3c53..d9ee1e8f 100644 --- a/backend/routes/models.py +++ b/backend/routes/models.py @@ -132,6 +132,9 @@ async def migrate_models(request: models.ModelMigrateRequest): if source.resolve() == destination.resolve(): raise HTTPException(status_code=400, detail="Source and destination are the same directory") + if destination.resolve().is_relative_to(source.resolve()): + raise HTTPException(status_code=400, detail="Destination cannot be inside the current cache directory") + model_dirs = [d for d in source.iterdir() if d.name.startswith("models--") and d.is_dir()] if not model_dirs: return {"moved": 0, "errors": [], "source": str(source), "destination": str(destination)}