From b486812ad9a20f0811c84a20830289102752bf1c Mon Sep 17 00:00:00 2001
From: Justin Carter <justin@daemon.com.au>
Date: Fri, 2 Sep 2016 15:51:04 +1000
Subject: [PATCH] FC-3085 call sanitizeFilename for filenames in CDN lib
 ioUploadFile

---
 packages/lib/cdn.cfc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/lib/cdn.cfc b/packages/lib/cdn.cfc
index b51880da9..d82ebae5b 100644
--- a/packages/lib/cdn.cfc
+++ b/packages/lib/cdn.cfc
@@ -554,7 +554,7 @@
 				<cfset application.fapi.throw(message="New file must have the same extension. Current extension is {1} and new extension is {2}.",type="uploaderror",substituteValues=[ listlast(arguments.destination,"."), listlast(cffile.serverFile,".") ]) />
 			</cfif>
 		<cfelse>
-			<cfset filename = normalizePath(arguments.destination & "/" & cffile.ServerFile) />
+			<cfset filename = normalizePath(arguments.destination & "/" & sanitizeFilename(cffile.ServerFile)) />
 		</cfif>
 
 		<!--- move the file if the destination location is different to the current temp location, or if the destination filename is different to the current temp filename --->