Check for an internationalised filename first

This commit is contained in:
Erik Johnston 2015-08-27 10:48:58 +01:00
parent 53c2eed862
commit 66ec6cf9b8

View file

@ -145,14 +145,20 @@ class BaseMediaResource(Resource):
content_disposition = headers.get("Content-Disposition", None)
if content_disposition:
_, params = cgi.parse_header(content_disposition[0],)
upload_name = params.get("filename", None)
if upload_name and not is_ascii(upload_name):
upload_name = None
else:
# First check if there is a valid UTF-8 filename
upload_name_utf8 = params.get("filename*", None)
if upload_name_utf8:
if upload_name_utf8.lower().startswith("utf-8''"):
upload_name = upload_name_utf8[7:]
# If there isn't check for an ascii name.
if not upload_name:
upload_name = params.get("filename", None)
if upload_name and not is_ascii(upload_name):
upload_name = None
if upload_name:
upload_name = urlparse.unquote(upload_name)
try: