Sanitized user-provided file names in HTTP multipart uploads

2024-02-10 00:08:18 +00:00 · 2024-02-10 00:08:18 +00:00 · 68c0941666
commit 68c0941666
parent 96e399a617
1 changed files with 1 additions and 1 deletions
--- a/src/main/java/stirling/software/SPDF/controller/api/misc/ShowJavascript.java
+++ b/src/main/java/stirling/software/SPDF/controller/api/misc/ShowJavascript.java
@ -75,7 +75,7 @@ public class ShowJavascript {

            return WebResponseUtils.bytesToWebResponse(
                    script.getBytes(StandardCharsets.UTF_8),
-                    inputFile.getOriginalFilename() + ".js");
+                    Filenames.toSimpleFileName(inputFile.getOriginalFilename()) + ".js");
        }
    }
 }