rixty/SillyTavern
1
0
Fork 0
mirror of https://github.com/SillyTavern/SillyTavern.git synced 2025-06-05 21:59:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Return filename validation messages

Browse Source
This commit is contained in:
valadaptive
2023-12-05 17:38:23 -05:00
parent 41d427f4a8
commit 795ca2247b
2 changed files with 34 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/endpoints/files.js
View File

@@ -16,13 +16,12 @@ router.post('/upload', jsonParser, async (request, response) => {
return response.status(400).send('No upload data specified');
}
const safeInput = validateAssetFileName(request.body.name);
// Validate filename
const validation = validateAssetFileName(request.body.name);
if (validation.error)
return response.status(400).send(validation.message);
if (!safeInput) {
return response.status(400).send('Invalid upload name');
}
const pathToUpload = path.join(DIRECTORIES.files, safeInput);
const pathToUpload = path.join(DIRECTORIES.files, request.body.name);
writeFileSyncAtomic(pathToUpload, request.body.data, 'base64');
const url = path.normalize(pathToUpload.replace('public' + path.sep, ''));
return response.send({ path: url });