From 38e1eb3d87ebf91f4d6d9575e6ac4068115663d2 Mon Sep 17 00:00:00 2001 From: Wolfgang Bumiller Date: Thu, 9 Jun 2016 16:54:47 +0200 Subject: [PATCH] upload: whitelist filename chars instead of blacklisting --- PVE/API2/Storage/Status.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/PVE/API2/Storage/Status.pm b/PVE/API2/Storage/Status.pm index ddd2fa4..81ba67f 100644 --- a/PVE/API2/Storage/Status.pm +++ b/PVE/API2/Storage/Status.pm @@ -343,7 +343,7 @@ __PACKAGE__->register_method ({ chomp $filename; $filename =~ s/^.*[\/\\]//; - $filename =~ s/[;:,=\s\x80-\xff]/_/g; + $filename =~ s/[^-a-zA-Z0-9_.]/_/g; my $path;