Fixes 2

Author: codeSamuraii

app.py

@@ -15,7 +15,7 @@
 async def lifespan(app: FastAPI):
     setup_logging()
     sentry_sdk.init(release=os.getenv('DEPLOYMENT_ID', 'local'))
-    app.state.redis = redis.asyncio.from_url(os.getenv('REDIS_URL', 'redis://localhost:6379'), decode_responses=True)
+    app.state.redis = redis.asyncio.from_url(os.getenv('REDIS_URL', 'redis://localhost:6379'))
     yield
     await app.state.redis.aclose()
 

lib/metadata.py

@@ -1,6 +1,7 @@
 from starlette.datastructures import Headers
-from pydantic import BaseModel, Field, StrictStr, field_validator, ByteSize, ConfigDict, AliasChoices
-from typing import Optional, Self, Annotated
+from pydantic import BaseModel, ByteSize, ConfigDict, Field, field_validator, StrictStr
+from typing import Annotated, Optional, Self
+import re
 
 
 class FileMetadata(BaseModel):
@@ -13,8 +14,19 @@ class FileMetadata(BaseModel):
     @field_validator('name')
     @classmethod
     def validate_name(cls, v: str) -> str:
-        safe_filename = str(v).translate(str.maketrans(':;|*@/\\', '       ')).strip()
-        return safe_filename.encode('latin-1', 'ignore').decode('utf-8', 'ignore')
+        if not v or not v.strip():
+            raise ValueError("Filename cannot be empty")
+
+        safe_filename = re.sub(r'[<>:"/\\|?*\x00-\x1f]', ' ', str(v)).strip()
+        if not safe_filename:
+            raise ValueError("Filename contains only invalid characters")
+
+        try:
+            safe_filename = safe_filename.encode('utf-8').decode('utf-8')
+        except UnicodeError:
+            safe_filename = safe_filename.encode('utf-8', 'ignore').decode('utf-8', 'ignore')
+
+        return safe_filename
 
     @classmethod
     def from_json(cls, data: str) -> Self:

lib/store.py

@@ -23,6 +23,7 @@ def __init__(self, transfer_id: str):
         self._k_metadata = self.key('metadata')
         self._k_position = self.key('position')
         self._k_progress = self.key('progress')
+        self._k_receiver_active = self.key('receiver_active')
 
     @classmethod
     def get_redis(cls) -> redis.Redis:
@@ -38,16 +39,15 @@ def key(self, name: str) -> str:
 
     async def add_chunk(self, data: bytes) -> None:
         """Add chunk to stream."""
-        # No maxlen limit - streams auto-expire after 5 minutes
         await self.redis.xadd(self._k_stream, {'data': data})
 
-    async def stream_chunks(self, timeout_ms: int = 20000):
+    async def stream_chunks(self, read_timeout: float = 20.0):
         """Stream chunks from last position."""
         position = await self.redis.get(self._k_position)
         last_id = position.decode() if position else '0'
 
         while True:
-            result = await self.redis.xread({self._k_stream: last_id}, block=timeout_ms)
+            result = await self.redis.xread({self._k_stream: last_id}, block=int(read_timeout*1000))
             if not result:
                 raise TimeoutError("Stream read timeout")
 
@@ -119,11 +119,11 @@ async def get_progress(self) -> int:
 
     async def set_receiver_active(self) -> None:
         """Mark receiver as actively downloading with TTL."""
-        await self.redis.set(self.key('receiver_active'), '1', ex=5)
+        await self.redis.set(self._k_receiver_active, '1', ex=5)
 
     async def is_receiver_active(self) -> bool:
         """Check if receiver is actively downloading."""
-        return bool(await self.redis.exists(self.key('receiver_active')))
+        return bool(await self.redis.exists(self._k_receiver_active))
 
     async def cleanup(self) -> None:
         """Delete all transfer data."""

static/js/file-transfer.js

@@ -9,7 +9,7 @@ const BUFFER_CHECK_INTERVAL = 200;        // 200ms interval for buffer checks
 const SHARE_LINK_FOCUS_DELAY = 300;       // 300ms delay before focusing share link
 const TRANSFER_FINALIZE_DELAY = 1000;      // 1000ms delay before finalizing transfer
 const MOBILE_BREAKPOINT = 768;            // 768px mobile breakpoint
-const TRANSFER_ID_MAX_NUMBER = 999;      // Maximum number for transfer ID generation
+const TRANSFER_ID_MAX_NUMBER = 1000;      // Maximum number for transfer ID generation
 
 const log = {
     debug: (...args) => DEBUG && console.debug(...args),