fix: drhider multipart UTF-8 filename decode (v1.8)
Deploy contracts-flask / validate (push) Successful in 0s

This commit is contained in:
2026-07-07 15:50:43 +04:00
parent 54be17dad5
commit e128b2614a
4 changed files with 26 additions and 7 deletions
+4
View File
@@ -82,6 +82,10 @@ class Handler(BaseHTTPRequestHandler):
if not m:
continue
name = os.path.basename(m.group(1))
try:
name = name.encode('latin-1').decode('utf-8')
except (UnicodeDecodeError, UnicodeEncodeError):
pass
if not name or ".." in name or "/" in name or "\\" in name:
continue
files.append((name, body, ""))