Backups/Mango
1
0
Fork 0
mirror of https://github.com/hkalexling/Mango.git synced 2025-08-03 11:25:29 -04:00
Code Issues Projects Releases Wiki Activity

Stricter sanitization rules for download filenames

Browse Source 
Fixes #212
This commit is contained in:
Alex Ling 2021-09-06 12:58:48 +00:00
parent da8a485087
commit 60a126024c
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/plugin/downloader.cr
View File

@ -24,8 +24,9 @@ class Plugin
end end
private def process_filename(str) private def process_filename(str)
return "_" if str == ".." str
str.gsub "/", "_" .gsub(/[\/\s\.\177\000-\031]/, "_")
.gsub(/__+/, "_")
end end
private def download(job : Queue::Job) private def download(job : Queue::Job)