Update app.py

app.py

@@ -1,71 +1,52 @@
 import gradio as gr
+import json
 
-# Problematic URL that triggers the SSRF validation error
-# This is a legitimate Hugging Face URL that should be allowed
-problematic_url = "https://huggingface.co/Norod78/Flux_1_Dev_LoRA_Paper-Cutout-Style/resolve/main/08a19840b6214b76b0607b2f9d5a7e28_63159b9d98124c008efb1d36446a615c.png"
-
-# Sample data with image URLs (similar to loras_state)
-sample_data = [
+# Sample data with HuggingFace image URLs that redirect to cas-bridge-direct.xethub.hf.co
+sample_loras = [
     {
-        "title": "Sample LoRA",
-        "image": problematic_url,  # This URL causes the issue
-        "repo": "some/repo"
+        "image": "https://huggingface.co/Norod78/Flux_1_Dev_LoRA_Paper-Cutout-Style/resolve/main/08a19840b6214b76b0607b2f9d5a7e28_63159b9d98124c008efb1d36446a615c.png",
+        "title": "Paper Cutout",
+        "repo": "Norod78/Flux_1_Dev_LoRA_Paper-Cutout-Style",
+        "trigger_word": ", Paper Cutout Style"
     }
 ]
 
-def add_item_function(text_input, state_data):
-    """
-    This function should be called when button is clicked,
-    but the error occurs before it even executes when gallery is in outputs.
-    """
-    print("Function was called!")  # This should appear in logs but doesn't
-    
-    # Add a new item to state
-    new_item = {
-        "title": f"New Item: {text_input}",
-        "image": problematic_url,  # This URL in the return value triggers SSRF
-        "repo": "new/repo"
-    }
-    state_data.append(new_item)
+def add_custom_lora_broken(custom_lora, selected_indices, current_loras, gallery):
+    """This version breaks because it passes current_loras (containing HF URLs) as function input"""
+    print("Starting to load a custom LoRA...")  # This won't print due to preprocessing error
     
-    # Format data for gallery: list of (image, title) tuples
-    gallery_data = [(item["image"], item["title"]) for item in state_data]
+    if custom_lora:
+        pass
     
-    # Use gr.update() to match the original code pattern exactly
-    return f"Added: {text_input}", state_data, gr.update(value=gallery_data)
+    return current_loras, gr.update(), gr.update(), gr.update(), selected_indices
+
+# Initialize state with URLs that will cause SSRF validation issues
+loras_state = gr.State(sample_loras)
 
-# Create the interface
 with gr.Blocks() as demo:
-    gr.Markdown("# Gradio SSRF Bug Reproduction")
-    gr.Markdown("Click the button below. You should see an error about hostname validation.")
-    gr.Markdown("The error occurs when the function tries to return data that will update a gallery with HuggingFace URLs.")
-    
-    # State containing URLs that trigger the issue
-    state_var = gr.State(sample_data)
+    gr.Markdown("# SSRF Validation Bug Reproduction")
     
-    # Simple text input
-    text_input = gr.Textbox(label="Enter some text", value="test")
+    selected_indices = gr.State([])
     
-    # Gallery that will be updated with the problematic URLs
+    custom_lora_input = gr.Textbox(label="Custom LoRA", placeholder="Enter custom LoRA")
+        
     gallery = gr.Gallery(
-        label="Gallery",
-        value=[(item["image"], item["title"]) for item in sample_data],
-        columns=3
+        [(item["image"], item["title"]) for item in sample_loras],
+        label="LoRA Gallery", 
+        columns=2
     )
     
-    # Output textbox
-    output = gr.Textbox(label="Output")
+    broken_button = gr.Button("Add Custom LoRA (Broken - passes state with URLs)")
     
-    # Button that triggers the error
-    button = gr.Button("Add item - this will fail")
+    error_display = gr.Textbox(label="Error/Success", interactive=False)
     
-    # This fails with: ValueError: Hostname cas-bridge-direct.xethub.hf.co failed validation
-    # The error occurs when Gradio tries to process the gallery update with the HF URLs
-    button.click(
-        fn=add_item_function,
-        inputs=[text_input, state_var],
-        outputs=[output, state_var, gallery]  # Including gallery in outputs triggers the error
+    broken_button.click(
+        add_custom_lora_broken,
+        inputs=[custom_lora_input, selected_indices, loras_state, gallery],  # ← loras_state causes SSRF error
+        outputs=[loras_state, gallery, error_display, custom_lora_input, selected_indices]
     )
 
 if __name__ == "__main__":
+    # Set global variable for working version
+    loras = sample_loras
     demo.launch()