modified: security policy

- Strengthened the default security policy
- Subdivided the risky levels high and middle into high+, high, middle+, and middle
- Added support for personal_cloud network mode
- Updated README.md

fixed: invalid security message
fixed: legacy - crash when security policy violation occurred

modified: default 'use_uv' is now True

comfyui_manager/glob/utils/security_utils.py

@@ -13,16 +13,29 @@ def is_loopback(address):
 
 def is_allowed_security_level(level):
     is_local_mode = is_loopback(args.listen)
-    
+    is_personal_cloud = core.get_config()['network_mode'].lower() == 'personal_cloud'
+
     if level == RiskLevel.block.value:
         return False
+    elif level == RiskLevel.high_p.value:
+        if is_local_mode:
+            return core.get_config()['security_level'] in [SecurityLevel.weak.value, SecurityLevel.normal_.value]
+        elif is_personal_cloud:
+            return core.get_config()['security_level'] == SecurityLevel.weak.value
+        else:
+            return False
     elif level == RiskLevel.high.value:
         if is_local_mode:
-            return core.get_config()["security_level"] in [SecurityLevel.weak.value, SecurityLevel.normal_.value]
+            return core.get_config()['security_level'] in [SecurityLevel.weak.value, SecurityLevel.normal_.value]
         else:
-            return core.get_config()["security_level"] == SecurityLevel.weak.value
+            return core.get_config()['security_level'] == SecurityLevel.weak.value
+    elif level == RiskLevel.middle_p.value:
+        if is_local_mode or is_personal_cloud:
+            return core.get_config()['security_level'] in [SecurityLevel.weak.value, SecurityLevel.normal.value, SecurityLevel.normal_.value]
+        else:
+            return False
     elif level == RiskLevel.middle.value:
-        return core.get_config()["security_level"] in [SecurityLevel.weak.value, SecurityLevel.normal.value, SecurityLevel.normal_.value]
+        return core.get_config()['security_level'] in [SecurityLevel.weak.value, SecurityLevel.normal.value, SecurityLevel.normal_.value]
     else:
         return True
 
@@ -41,7 +54,7 @@ async def get_risky_level(files, pip_packages):
 
     for x in files:
         if x not in all_urls:
-            return RiskLevel.high.value
+            return RiskLevel.high_p.value
 
     all_pip_packages = set()
     for x in json_data1["custom_nodes"] + json_data2["custom_nodes"]:
@@ -51,4 +64,4 @@ async def get_risky_level(files, pip_packages):
         if p not in all_pip_packages:
             return RiskLevel.block.value
 
-    return RiskLevel.middle.value
+    return RiskLevel.middle_p.value