mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-07-06 18:59:13 +00:00
Code Issues 32 Releases Wiki Activity

Refs #35818 - Fixed empty file root for dotted filename

Browse Source
This commit is contained in:
Bruno Alla 2024-10-07 12:27:53 -03:00
parent 64ec5c4cef
commit 519615aecc
No known key found for this signature in database
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
django/core/files/storage/base.py
View File

@ -84,7 +84,15 @@ class Storage:
"Detected path traversal attempt in '%s'" % dir_name "Detected path traversal attempt in '%s'" % dir_name
) )
validate_file_name(file_name) validate_file_name(file_name)
file_ext = "".join(pathlib.PurePath(file_name).suffixes) # Extract file extensions (.txt, .jpeg, .tar.gz) from the filename
suffixes = pathlib.PurePath(file_name).suffixes
file_ext = ""
# Iterate backwards from the last suffix. Consider suffixes
# shorter than 5 characters to be part of the extension
for index, suffix in enumerate(suffixes[::-1]):
if index > 0 and len(suffix) >= 5:
break
file_ext = suffix + file_ext
file_root = file_name.removesuffix(file_ext) file_root = file_name.removesuffix(file_ext)
# If the filename is not available, generate an alternative # If the filename is not available, generate an alternative
# filename until one is available. # filename until one is available.