# HG changeset patch # User Kim Alvefur # Date 1449853243 -3600 # Node ID 3b748666ff97b154d90141464331e610d524bbd7 # Parent 3d8e2480fae0da809de953160813180e35bd6b0c mod_http_upload: URL-encode filename in case it contains characters that need escaping (thanks Thilo) diff -r 3d8e2480fae0 -r 3b748666ff97 mod_http_upload/mod_http_upload.lua --- a/mod_http_upload/mod_http_upload.lua Thu Dec 10 23:32:02 2015 +0100 +++ b/mod_http_upload/mod_http_upload.lua Fri Dec 11 18:00:43 2015 +0100 @@ -11,6 +11,7 @@ local st = require"util.stanza"; local lfs = require"lfs"; local uuid = require"util.uuid".generate; +local urlencode = require"util.http".urlencode; local t_concat = table.concat; local t_insert = table.insert; local s_upper = string.upper; @@ -66,7 +67,7 @@ reply:tag("slot", { xmlns = xmlns_http_upload }); local random = uuid(); pending_slots[random.."/"..filename] = origin.full_jid; - local url = module:http_url() .. "/" .. random .. "/" .. filename; + local url = module:http_url() .. "/" .. random .. "/" .. urlencode(filename); reply:tag("get"):text(url):up(); reply:tag("put"):text(url):up(); origin.send(reply);