Skip to content

Commit 07741bc

Browse files
docs(download_file): annotate filename sanitization purpose
Agent-Logs-Url: https://github.com/fabiocaccamo/python-fsutil/sessions/79e7623b-5e54-484b-838b-9b58f5877733 Co-authored-by: fabiocaccamo <1035294+fabiocaccamo@users.noreply.github.com>
1 parent 18351b8 commit 07741bc

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

src/fsutil/operations.py

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -213,6 +213,7 @@ def download_file(
213213
filename_pattern = r'filename="(.*)"'
214214
filename_match = re.search(filename_pattern, content_disposition)
215215
if filename_match:
216+
# sanitize Content-Disposition filename to prevent path traversal
216217
filename = os.path.basename(filename_match.group(1))
217218
# or detect filename from url
218219
if not filename:

0 commit comments

Comments
 (0)