safe filename

monicasmith463 · monicasmith463 · commit eb4ac0ae289a · 2025-08-05T13:35:13.000-07:00
diff --git a/backend/app/s3.py b/backend/app/s3.py
@@ -11,8 +11,8 @@
 )
 
 def upload_file_to_s3(file: UploadFile, user_id: str) -> str:
-    filename = file.filename or ""
-    extension = filename.split(".")[-1] if "." in file.filename else ""
+    safe_filename = file.filename or ""
+    extension = safe_filename.split(".")[-1] if "." in safe_filename else ""
     bucket = settings.S3_BUCKET_NAME
     key = f"documents/{user_id}/{uuid.uuid4()}.{extension}"
 

Original file line number	Diff line number	Diff line change
`@@ -11,8 +11,8 @@`
`11`	`11`	`)`
`12`	`12`
`13`	`13`	`def upload_file_to_s3(file: UploadFile, user_id: str) -> str:`
`14`		`- filename = file.filename or ""`
`15`		`- extension = filename.split(".")[-1] if "." in file.filename else ""`
	`14`	`+ safe_filename = file.filename or ""`
	`15`	`+ extension = safe_filename.split(".")[-1] if "." in safe_filename else ""`
`16`	`16`	`bucket = settings.S3_BUCKET_NAME`
`17`	`17`	`key = f"documents/{user_id}/{uuid.uuid4()}.{extension}"`
`18`	`18`