Matrix-Mirrors/anonymousland-synapse
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse.git synced 2025-06-25 00:10:27 -04:00
Code Issues Projects Releases Packages Wiki Activity

Enforce ascii filenames for uploads

Browse source
This commit is contained in:
Erik Johnston 2015-06-30 10:31:59 +01:00
parent 2124f668db
commit 9beaedd164
3 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
synapse/rest/media/v1/base_resource.py
View file

@ -27,6 +27,7 @@ from twisted.web.resource import Resource
from twisted.protocols.basic import FileSender
from synapse.util.async import ObservableDeferred
from synapse.util.stringutils import is_ascii
import os
@ -135,6 +136,8 @@ class BaseMediaResource(Resource):
if content_disposition:
_, params = cgi.parse_header(content_disposition[0],)
upload_name = params.get("filename", None)
if upload_name and not is_ascii(upload_name):
upload_name = None
else:
upload_name = None