Sanitize file names on chat renaming

3e2b892aaec238412ad9093427235ec4b597162e

Cohee <18619528+Cohee1207@users.noreply.github.com>

public/script.js+4 -0 Viewed

@@ -8828,6 +8828,10 @@ export async function renameChat(oldFileName, newName) {
8828	throw new Error('Server returned an error.');	8828	throw new Error('Server returned an error.');
8829	}	8829	}
8830		8830
		8831	if (data.sanitizedFileName) {
		8832	newName = data.sanitizedFileName;
		8833	}
		8834
8831	if (selected_group) {	8835	if (selected_group) {
8832	await renameGroupChat(selected_group, oldFileName, newName);	8836	await renameGroupChat(selected_group, oldFileName, newName);
8833	}	8837	}

src/endpoints/chats.js+4 -3 Viewed

     const pathToFolder = request.body.is_group
         ? request.user.directories.groupChats
         : path.join(request.user.directories.chats, String(request.body.avatar_url).replace('.png', ''));
-    const pathToOriginalFile = path.join(pathToFolder, request.body.original_file);
+    const pathToOriginalFile = path.join(pathToFolder, sanitize(request.body.original_file));
-    const pathToRenamedFile = path.join(pathToFolder, request.body.renamed_file);
+    const pathToRenamedFile = path.join(pathToFolder, sanitize(request.body.renamed_file));
+    const sanitizedFileName = path.parse(pathToRenamedFile).name;
     console.log('Old chat name', pathToOriginalFile);
     console.log('New chat name', pathToRenamedFile);

     fs.copyFileSync(pathToOriginalFile, pathToRenamedFile);
     fs.rmSync(pathToOriginalFile);
     console.log('Successfully renamed.');
-    return response.send({ ok: true });
+    return response.send({ ok: true, sanitizedFileName });
 });
 router.post('/delete', jsonParser, function (request, response) {