Fixing LFI

SonicCloudOrg · Apr 29, 2024 · 8682058 · 8682058
1 parent 5a76b53
commit 8682058
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/sonic-server-folder/src/main/java/org/cloud/sonic/folder/controller/UploadController.java b/sonic-server-folder/src/main/java/org/cloud/sonic/folder/controller/UploadController.java
@@ -97,9 +97,13 @@ public RespModel<String> uploadRecord(@RequestParam(name = "file") MultipartFile
         if (!uuidFolder.exists()) {
             uuidFolder.mkdirs();
         }
+
         String fileName = file.getOriginalFilename();
-        String newName = fileName.substring(0, fileName.indexOf(".mp4")) + "-" + index + ".mp4";
-        File local = new File(uuidFolder.getPath() + File.separator + newName);
+        if (fileName != null) {
+            fileName = new File(fileName).getName();
+            String newName = fileName.substring(0, fileName.indexOf(".mp4")) + "-" + index + ".mp4";
+            File local = new File(uuidFolder.getPath() + File.separator + newName);
+            }
         RespModel<String> responseModel;
         try {
             file.transferTo(local.getAbsoluteFile());