DAV-KA/django-dav-events
1
0
Fork 0
Code Issues 24 Pull Requests Actions Releases Wiki Activity

FIX: dav_submission: filter non ascii-chars in directory and file names.

Browse Source
This commit is contained in:
heinzel
2019-11-08 12:23:57 +01:00
parent 96ad5b30d4
commit 4ef91076e0
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
dav_submission/views.py
View File

@@ -153,10 +153,17 @@ class UploadView(generic.edit.FormView):
def _sanitize_filename(self, input): def _sanitize_filename(self, input):
max_length = None max_length = None
discard_chars = u'' discard_chars = u''
replace_chars = {
u'ä': u'ae',
u'ö': u'oe',
u'ü': u'ue',
u'ß': u'ss',
u'Ä': u'Ae',
u'Ö': u'Oe',
u'Ü': u'Ue',
}
allowed_chars = (u'abcdefghijklmnopqrstuvwxyz' allowed_chars = (u'abcdefghijklmnopqrstuvwxyz'
u'äöüß'
u'ABCDEFGHIJKLMNOPQRSTUVWXYZ' u'ABCDEFGHIJKLMNOPQRSTUVWXYZ'
u'ÄÖÜ'
u'0123456789' u'0123456789'
u'._-') u'._-')
non_allowed_substitute = u'_' non_allowed_substitute = u'_'
@@ -169,6 +176,8 @@ class UploadView(generic.edit.FormView):
for c in input: for c in input:
if c in discard_chars: if c in discard_chars:
continue continue
elif c in replace_chars:
r += replace_chars[c]
elif allowed_chars is not None and c in allowed_chars: elif allowed_chars is not None and c in allowed_chars:
r += c r += c
elif allowed_chars is None and c.isalnum(): elif allowed_chars is None and c.isalnum():