Merge pull request #1327 from cyqsimon/sanitize_path_usage

Fix inaccurate uses of `sanitize_path`

1 files changed, 4 insertions, 3 deletions

diff --git a/src/file_op.rs b/src/file_op.rs
index 760b23e..35e56fa 100644
--- a/src/file_op.rs
+++ b/src/file_op.rs
@@ -152,9 +152,10 @@ async fn handle_multipart(
         )
     })?;
 
-    let filename_path = sanitize_path(Path::new(&filename), false).ok_or_else(|| {
-        ContextualError::InvalidPathError("Invalid file name to upload".to_string())
-    })?;
+    let filename_path =
+        sanitize_path(Path::new(&filename), allow_hidden_paths).ok_or_else(|| {
+            ContextualError::InvalidPathError("Invalid file name to upload".to_string())
+        })?;
 
     // Ensure there are no illegal symlinks in the file upload path
     if !allow_symlinks {