cpvalente/ontime
1
0
Fork 0
mirror of https://github.com/cpvalente/ontime.git synced 2026-08-09 09:23:51 +00:00
Code Issues Packages Projects Releases 10 Wiki Activity

fix: ensure filename sanitation in all routes

Browse Source
This commit is contained in:
Carlos Valente
2025-08-15 20:16:50 +02:00
committed by Carlos Valente
parent 0e770655dc
commit 902edf4a85
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/server/src/utils/upload.ts
+3 -1
View File
@@ -2,6 +2,7 @@ import multer from 'multer';
import path from 'path';
import fs from 'fs';
import { rm } from 'fs/promises';
import sanitize from 'sanitize-filename';
import { getAppDataPath, publicDir } from '../setup/index.js';
@@ -39,7 +40,8 @@ export const storage = multer.diskStorage({
ensureDirectory(publicDir.uploadsDir);
const filePath = path.join(publicDir.uploadsDir, file.originalname);
const sanitisedName = sanitize(file.originalname);
const filePath = path.join(publicDir.uploadsDir, sanitisedName);
// Check if file already exists
fs.access(filePath, fs.constants.F_OK, (err) => {