Stricter sanitization rules for download filenames

Fixes #212
2026-04-25 00:00:52 -04:00 · 2021-09-06 12:58:48 +00:00
parent da8a485087
commit 60a126024c
1 changed files with 3 additions and 2 deletions
@@ -24,8 +24,9 @@ class Plugin
    end
    private def process_filename(str)
-      return "_" if str == ".."
+      str
-      str.gsub "/", "_"
+        .gsub(/[\/\s\.\177\000-\031]/, "_")
        .gsub(/__+/, "_")
    end
    private def download(job : Queue::Job)