Matrix-Mirrors/synapse-product
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse-product.git synced 2025-02-10 08:28:25 -05:00
Code Issues Packages Projects Releases Wiki Activity

Check for an internationalised filename first

Browse Source
This commit is contained in:
Erik Johnston 2015-08-27 10:48:58 +01:00
parent 53c2eed862
commit 66ec6cf9b8
1 changed files with 14 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
synapse/rest/media/v1/base_resource.py
View File

@ -145,14 +145,20 @@ class BaseMediaResource(Resource):
content_disposition = headers.get("Content-Disposition", None) content_disposition = headers.get("Content-Disposition", None)
if content_disposition: if content_disposition:
_, params = cgi.parse_header(content_disposition[0],) _, params = cgi.parse_header(content_disposition[0],)
upload_name = params.get("filename", None) upload_name = None
if upload_name and not is_ascii(upload_name):
upload_name = None # First check if there is a valid UTF-8 filename
else: upload_name_utf8 = params.get("filename*", None)
upload_name_utf8 = params.get("filename*", None) if upload_name_utf8:
if upload_name_utf8: if upload_name_utf8.lower().startswith("utf-8''"):
if upload_name_utf8.lower().startswith("utf-8''"): upload_name = upload_name_utf8[7:]
upload_name = upload_name_utf8[7:]
# If there isn't check for an ascii name.
if not upload_name:
upload_name = params.get("filename", None)
if upload_name and not is_ascii(upload_name):
upload_name = None
if upload_name: if upload_name:
upload_name = urlparse.unquote(upload_name) upload_name = urlparse.unquote(upload_name)
try: try: