aljaz/btcpayserver
1
0
Fork 0
mirror of https://github.com/aljazceru/btcpayserver.git synced 2025-12-17 22:14:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Better validate file names

Browse Source
This commit is contained in:
nicolas.dorier
2021-03-19 18:55:07 +09:00
parent fc78eacf8f
commit 73d70aa5e5
7 changed files with 39 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
BTCPayServer/Controllers/ServerController.Storage.cs
View File

@@ -146,6 +146,15 @@ namespace BTCPayServer.Controllers
[HttpPost("server/files/upload")]
public async Task<IActionResult> CreateFile(IFormFile file)
{
if (!file.FileName.IsValidFileName())
{
this.TempData.SetStatusMessageModel(new StatusMessageModel()
{
Message = "Invalid file name",
Severity = StatusMessageModel.StatusSeverity.Error
});
return RedirectToAction(nameof(Files));
}
var newFile = await _FileService.AddFile(file, GetUserId());
return RedirectToAction(nameof(Files), new
{