From 6a4cb7eee51ef83d804c15f94d40a68a5b9a2545 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?L=C3=A1szl=C3=B3=20Szalma?= <dblaci@dblaci.hu>
Date: Wed, 29 Oct 2025 11:58:34 +0100
Subject: [PATCH] overridable forbidden characters

---
 src/Request.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Request.php b/src/Request.php
index c6df760..ca7bb3a 100644
--- a/src/Request.php
+++ b/src/Request.php
@@ -235,7 +235,7 @@ public function getRequest(): HttpRequest
      */
     protected function isValidFilename(string $filename): bool
     {
-        $forbidden = ['../', '"', "'", '&', '/', '\\', '?', '#', ':'];
+        $forbidden = Config::get('file.forbidden_characters') ?? ['../', '"', "'", '&', '/', '\\', '?', '#', ':'];
 
         foreach ($forbidden as $char) {
             if (false !== strpos($filename, $char)) {