From 8742f0cabb39ef6dce69681596a0ae5e740e89e8 Mon Sep 17 00:00:00 2001 From: Andrey Alekseenko Date: Tue, 30 Jun 2015 14:43:02 +0300 Subject: [PATCH] Using get_valid_filename to sanitize attachment names --- taiga/projects/attachments/models.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/taiga/projects/attachments/models.py b/taiga/projects/attachments/models.py index c95c0f6b..5619bf68 100644 --- a/taiga/projects/attachments/models.py +++ b/taiga/projects/attachments/models.py @@ -27,16 +27,14 @@ from django.contrib.contenttypes import generic from django.utils import timezone from django.utils.encoding import force_bytes from django.utils.translation import ugettext_lazy as _ -from django.template.defaultfilters import slugify +from django.utils.text import get_valid_filename from taiga.base.utils.iterators import split_by_n def get_attachment_file_path(instance, filename): basename = path.basename(filename).lower() - base, ext = path.splitext(basename) - base = slugify(unidecode(base)) - basename = "".join([base, ext]) + basename = get_valid_filename(basename) hs = hashlib.sha256() hs.update(force_bytes(timezone.now().isoformat()))