github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-22 16:21:18 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: only allow printable characters in uploads filename

Browse Source
This commit is contained in:
Régis Hanol
2018-08-21 18:11:01 +02:00
parent e94b5b4d78
commit d1607a387a
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/upload_creator.rb
View File

@ -22,8 +22,8 @@ class UploadCreator
# - for_export (boolean)
def initialize(file, filename, opts = {})
@file = file
@filename = filename || ''
@upload = Upload.new(original_filename: filename, filesize: 0)
@filename = (filename || "").gsub(/[^[:print:]]/, "")
@upload = Upload.new(original_filename: @filename, filesize: 0)
@opts = opts
end