Merge commit from fork * Add file name sanitation to background upload * Add file name sanitation to chat export

843c5721548a25b7b94011dceabe76568506f898

Cohee <18619528+Cohee1207@users.noreply.github.com>

Signed

src/endpoints/backgrounds.js+1 -1 Viewed

     if (!request.body || !request.file) return response.sendStatus(400);
     const img_path = path.join(request.file.destination, request.file.filename);
-    const filename = request.file.originalname;
+    const filename = sanitize(request.file.originalname);
     try {
         fs.copyFileSync(img_path, path.join(request.user.directories.backgrounds, filename));

src/endpoints/chats.js+1 -1 Viewed

     const pathToFolder = request.body.is_group
         ? request.user.directories.groupChats
         : path.join(request.user.directories.chats, String(request.body.avatar_url).replace('.png', ''));
-    let filename = path.join(pathToFolder, request.body.file);
+    let filename = path.join(pathToFolder, sanitize(request.body.file));
     let exportfilename = request.body.exportfilename;
     if (!fs.existsSync(filename)) {
         const errorMessage = {