yujunjun/LightRAG
1
0
Fork 0
mirror of https://github.com/HKUDS/LightRAG.git synced 2025-06-26 22:00:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix linting

Browse Source
This commit is contained in:
yangdx 2025-06-27 02:33:20 +08:00
parent 60777d535b
commit a506753548
1 changed files with 17 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
lightrag/api/routers/document_routes.py
View File

@ -81,18 +81,20 @@ def sanitize_filename(filename: str, input_dir: Path) -> str:
raise HTTPException(status_code=400, detail="Filename cannot be empty") raise HTTPException(status_code=400, detail="Filename cannot be empty")
# Remove path separators and traversal sequences # Remove path separators and traversal sequences
clean_name = filename.replace('/', '').replace('\\', '') clean_name = filename.replace("/", "").replace("\\", "")
clean_name = clean_name.replace('..', '') clean_name = clean_name.replace("..", "")
# Remove control characters and null bytes # Remove control characters and null bytes
clean_name = ''.join(c for c in clean_name if ord(c) >= 32 and c != '\x7f') clean_name = "".join(c for c in clean_name if ord(c) >= 32 and c != "\x7f")
# Remove leading/trailing whitespace and dots # Remove leading/trailing whitespace and dots
clean_name = clean_name.strip().strip('.') clean_name = clean_name.strip().strip(".")
# Check if anything is left after sanitization # Check if anything is left after sanitization
if not clean_name: if not clean_name:
raise HTTPException(status_code=400, detail="Invalid filename after sanitization") raise HTTPException(
status_code=400, detail="Invalid filename after sanitization"
)
# Verify the final path stays within the input directory # Verify the final path stays within the input directory
try: try: