Inzaniak / sd-webui-ranbooru

71 stars 7 forks source link

Tags returned by Gelbooru API are not properly unescaped #40

Open ghost opened 1 month ago

ghost commented 1 month ago

For example this is the tag list returned by https://gelbooru.com/index.php?page=dapi&s=post&q=index&id=10833827&json=1:

"3girls :3 :d aqua_neckerchief arms_on_table black_gloves blush bob_cut brown_dress brown_hair closed_mouth commentary deformed diagonal_bangs dress flower fujishima_megumi genmaicha_(g_teall) gloves green_eyes grey_hair hair_bun hair_flower hair_ornament hand_on_another's_head hands_on_another's_head hasu_no_sora_school_uniform highres human_tower inverted_bob link!_like!_love_live! long_hair long_sleeves looking_at_viewer love_live! multicolored_hair multiple_girls neckerchief open_mouth otomune_kozue purple_eyes purple_hair red_eyes red_flower red_hair sailor_collar sailor_dress school_uniform short_hair side_ponytail sidelocks single_side_bun smile split_mouth stacking star_(symbol) star_hair_ornament streaked_hair teeth two_side_up upper_teeth_only virtual_youtuber waving white_sailor_collar winter_uniform yugiri_tsuzuri"

In which hands_on_another's_head is HTML escaped to hands_on_another's_head.

In some webui anything after the escaped # will be treated as line comment hence ignored.