yangdx 60777d535b fix: prevent Path Traversal vulnerability in upload endpoint
- Add sanitize_filename() function to validate and clean uploaded filenames
- Remove path separators, traversal sequences, and control characters
- Verify final paths stay within input directory using Path.resolve()
- Return HTTP 400 errors for unsafe filenames
- Prevents directory traversal attacks like ../../../etc/passwd
2025-06-27 02:33:05 +08:00
..
2025-02-20 15:09:43 +01:00
2025-06-25 12:39:57 +08:00
2025-02-15 22:37:12 +01:00
2025-06-26 01:00:54 +08:00
2025-02-15 22:37:12 +01:00
2025-02-15 22:37:12 +01:00
2025-06-09 18:52:34 +08:00