mirrors/synapse
1
0
Fork 0
mirror of https://github.com/element-hq/synapse.git synced 2024-11-27 20:22:07 +03:00
Code Issues Projects Releases Packages Wiki Activity

Check for an internationalised filename first

Browse source
This commit is contained in:
Erik Johnston 2015-08-27 10:48:58 +01:00
parent 53c2eed862
commit 66ec6cf9b8
1 changed files with 14 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
synapse/rest/media/v1/base_resource.py
View file

@ -145,14 +145,20 @@ class BaseMediaResource(Resource):
content_disposition = headers.get("Content-Disposition", None)
if content_disposition:
_, params = cgi.parse_header(content_disposition[0],)
upload_name = params.get("filename", None)
if upload_name and not is_ascii(upload_name):
upload_name = None
else:
# First check if there is a valid UTF-8 filename
upload_name_utf8 = params.get("filename*", None)
if upload_name_utf8:
if upload_name_utf8.lower().startswith("utf-8''"):
upload_name = upload_name_utf8[7:]
# If there isn't check for an ascii name.
if not upload_name:
upload_name = params.get("filename", None)
if upload_name and not is_ascii(upload_name):
upload_name = None
if upload_name:
upload_name = urlparse.unquote(upload_name)
try: