mirror of
https://github.com/SillyTavern/SillyTavern.git
synced 2025-06-05 21:59:27 +02:00
Move sanitize call inside validation function
Also rename it (again) to validateAssetFileName.
This commit is contained in:
@@ -2,7 +2,7 @@ const path = require('path');
|
||||
const writeFileSyncAtomic = require('write-file-atomic').sync;
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const { sanitizeAssetFileName } = require('./assets');
|
||||
const { validateAssetFileName } = require('./assets');
|
||||
const { jsonParser } = require('../express-common');
|
||||
const { DIRECTORIES } = require('../constants');
|
||||
|
||||
@@ -16,7 +16,7 @@ router.post('/upload', jsonParser, async (request, response) => {
|
||||
return response.status(400).send('No upload data specified');
|
||||
}
|
||||
|
||||
const safeInput = sanitizeAssetFileName(request.body.name);
|
||||
const safeInput = validateAssetFileName(request.body.name);
|
||||
|
||||
if (!safeInput) {
|
||||
return response.status(400).send('Invalid upload name');
|
||||
|
Reference in New Issue
Block a user