search

linto-ai / linto-stt

An automatic speech recognition API
GNU Affero General Public License v3.0
45 stars 14 forks source link

🔒 Change the filename to something generated by the application #4

Closed jbleduigou closed 4 years ago

jbleduigou commented 4 years ago

As mentioned in the OWASP File Upload Cheat Sheet, it is a good practice to change the filename to something generated by the application. In this PR the generated filename is a UUID.

See also: https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html

irebai commented 4 years ago

Thank you for your recommendation. Indeed, a generated filename using uuid is now applied when processing the audio file. Please, pull the new changes!