From 2fe13fbddb403469dc3260b2ff6c84ec5fc153c7 Mon Sep 17 00:00:00 2001
From: cyqsimon <28627918+cyqsimon@users.noreply.github.com>
Date: Fri, 26 Jan 2024 13:13:21 +0800
Subject: Fix inaccurate uses of `sanitize_path`

---
 src/file_op.rs | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'src/file_op.rs')

diff --git a/src/file_op.rs b/src/file_op.rs
index 760b23e..35e56fa 100644
--- a/src/file_op.rs
+++ b/src/file_op.rs
@@ -152,9 +152,10 @@ async fn handle_multipart(
         )
     })?;
 
-    let filename_path = sanitize_path(Path::new(&filename), false).ok_or_else(|| {
-        ContextualError::InvalidPathError("Invalid file name to upload".to_string())
-    })?;
+    let filename_path =
+        sanitize_path(Path::new(&filename), allow_hidden_paths).ok_or_else(|| {
+            ContextualError::InvalidPathError("Invalid file name to upload".to_string())
+        })?;
 
     // Ensure there are no illegal symlinks in the file upload path
     if !allow_symlinks {
-- 
cgit v1.2.3