dearwolf/LocalAI
1
0
Fork 0
mirror of https://github.com/mudler/LocalAI.git synced 2025-05-21 11:04:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 13

Initial implementation of upload files api. (#1703)

Browse source 
* Initial implementation of upload files api.

* Move sanitize method to utils.

* Save uploaded data to uploads folder.

* Avoid loop if we do not have a purpose.

* Minor cleanup of api and fix bug where deleting duplicate filename cause error.

* Revert defer of saving config

* Moved creation of directory to startup.

* Make file names unique when storing on disk.

* Add test for files api.

* Update dependencies.
This commit is contained in:
Steven Christou 2024-02-18 02:12:02 -08:00 • committed by GitHub
parent c72808f18b
commit 01205fd4c0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
8 changed files with 538 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

12
pkg/utils/path.go
View file

@ -3,6 +3,7 @@ package utils
import (
"fmt"
"path/filepath"
"strings"
)
func inTrustedRoot(path string, trustedRoot string) error {
@ -20,3 +21,14 @@ func VerifyPath(path, basePath string) error {
c := filepath.Clean(filepath.Join(basePath, path))
return inTrustedRoot(c, filepath.Clean(basePath))
}
// SanitizeFileName sanitizes the given filename
func SanitizeFileName(fileName string) string {
// filepath.Clean to clean the path
cleanName := filepath.Clean(fileName)
// filepath.Base to ensure we only get the final element, not any directory path
baseName := filepath.Base(cleanName)
// Replace any remaining tricky characters that might have survived cleaning
safeName := strings.ReplaceAll(baseName, "..", "")
return safeName
}