mirror of
https://github.com/agent0ai/agent-zero.git
synced 2026-05-01 05:00:34 +00:00
better filename check
This commit is contained in:
parent
c4846e7e9d
commit
e5669daf67
9 changed files with 75 additions and 17 deletions
|
|
@ -1,6 +1,6 @@
|
|||
from python.helpers.api import ApiHandler, Request, Response
|
||||
from python.helpers import files
|
||||
from werkzeug.utils import secure_filename
|
||||
from python.helpers.security import safe_filename
|
||||
|
||||
|
||||
class UploadFile(ApiHandler):
|
||||
|
|
@ -13,7 +13,11 @@ class UploadFile(ApiHandler):
|
|||
|
||||
for file in file_list:
|
||||
if file and self.allowed_file(file.filename): # Check file type
|
||||
filename = secure_filename(file.filename) # type: ignore
|
||||
if not file.filename:
|
||||
continue
|
||||
filename = safe_filename(file.filename)
|
||||
if not filename:
|
||||
continue
|
||||
file.save(files.get_abs_path("tmp/upload", filename))
|
||||
saved_filenames.append(filename)
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue