mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-05-13 06:34:39 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(user-export): sanitize filenames in zip properly

Browse source 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
This commit is contained in:
Erik Michelson 2022-11-11 22:47:06 +01:00 • committed by David Mehren
parent 2342587b98
commit 0a9939cfb4
3 changed files with 22 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/web/userRouter.js
View file

@ -1,6 +1,7 @@
'use strict'
const archiver = require('archiver')
const sanitizeFilename = require('sanitize-filename')
const async = require('async')
const Router = require('express').Router
@ -92,7 +93,7 @@ UserRouter.get('/me/export', function (req, res) {
}).then(function (notes) {
const filenames = {}
async.each(notes, function (note, callback) {
const basename = note.title.replace(/\//g, '-') // Prevent subdirectories
const basename = sanitizeFilename(note.title, { replacement: '_' })
let filename
let suffix = ''
do {