fix: Sanitize filename during chunk upload

Signed-off-by: Vincent Boutour <[email protected]>
ViBiOh · Jul 18, 2022 · 226e869 · 226e869
1 parent 5038a89
commit 226e869
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/crud/upload_chunk.go b/pkg/crud/upload_chunk.go
@@ -89,6 +89,11 @@ func (a App) mergeChunk(w http.ResponseWriter, r *http.Request, request provider
 		return
 	}
 
+	fileName, err = provider.SanitizeName(fileName, true)
+	if err != nil {
+		a.error(w, r, request, model.WrapInternal(err))
+		return
+	}
 	filePath := request.SubPath(fileName)
 	err = provider.WriteToStorage(r.Context(), a.storageApp, filePath, size, file)