Open CarlosNZ opened 1 month ago
Alternate solution was to correctly escape the file names (percent-escaping) before sending them to the sendFile
method. Working correctly now, so no need to restrict incoming file names at this point.
Re-opening this as found case where server actions are failing due to inappropriate characters -- need to investigate further
Suggested fix -- in "fileUpload" element, strip out any illegal characters on upload and save them with modified filenames.
Legal chars should be restricted to letters,numbers, space, and underscore (what about åccénted letters? -- need to test)
Illegal chars should be replaced with underscores, probably.