Fixes 2

Author: codeSamuraii

app.py

@@ -15,7 +15,7 @@
 async def lifespan(app: FastAPI):
     setup_logging()
     sentry_sdk.init(release=os.getenv('DEPLOYMENT_ID', 'local'))
-    app.state.redis = redis.asyncio.from_url(os.getenv('REDIS_URL', 'redis://localhost:6379'), decode_responses=True)
+    app.state.redis = redis.asyncio.from_url(os.getenv('REDIS_URL', 'redis://localhost:6379'))
     yield
     await app.state.redis.aclose()
 

lib/metadata.py

@@ -1,6 +1,7 @@
 from starlette.datastructures import Headers
-from pydantic import BaseModel, Field, StrictStr, field_validator, ByteSize, ConfigDict, AliasChoices
-from typing import Optional, Self, Annotated
+from pydantic import BaseModel, ByteSize, ConfigDict, Field, field_validator, StrictStr
+from typing import Annotated, Optional, Self
+import re
 
 
 class FileMetadata(BaseModel):
@@ -13,8 +14,19 @@ class FileMetadata(BaseModel):
     @field_validator('name')
     @classmethod
     def validate_name(cls, v: str) -> str:
-        safe_filename = str(v).translate(str.maketrans(':;|*@/\\', '       ')).strip()
-        return safe_filename.encode('latin-1', 'ignore').decode('utf-8', 'ignore')
+        if not v or not v.strip():
+            raise ValueError("Filename cannot be empty")
+
+        safe_filename = re.sub(r'[<>:"/\\|?*\x00-\x1f]', ' ', str(v)).strip()
+        if not safe_filename:
+            raise ValueError("Filename contains only invalid characters")
+
+        try:
+            safe_filename = safe_filename.encode('utf-8').decode('utf-8')
+        except UnicodeError:
+            safe_filename = safe_filename.encode('utf-8', 'ignore').decode('utf-8', 'ignore')
+
+        return safe_filename
 
     @classmethod
     def from_json(cls, data: str) -> Self:

lib/store.py

@@ -41,13 +41,13 @@ async def add_chunk(self, data: bytes) -> None:
         # No maxlen limit - streams auto-expire after 5 minutes
         await self.redis.xadd(self._k_stream, {'data': data})
 
-    async def stream_chunks(self, timeout_ms: int = 20000):
+    async def stream_chunks(self, read_timeout: float = 20.0):
         """Stream chunks from last position."""
         position = await self.redis.get(self._k_position)
         last_id = position.decode() if position else '0'
 
         while True:
-            result = await self.redis.xread({self._k_stream: last_id}, block=timeout_ms)
+            result = await self.redis.xread({self._k_stream: last_id}, block=int(read_timeout*1000))
             if not result:
                 raise TimeoutError("Stream read timeout")