Merged in r2-2887-bulk-export-name (pull request #6901)

R2-2887: Sanitizing user defined filename for bulk exports
primeroIMS · Aug 16, 2024 · 831e9c8 · 831e9c8
2 parents 2d3f185 + dab370d
commit 831e9c8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/models/bulk_export.rb b/app/models/bulk_export.rb
@@ -102,7 +102,7 @@ def archive!
   end
 
   def generate_file_name
-    return if file_name.present?
+    return self.file_name = ActiveStorage::Filename.new(file_name).sanitized if file_name.present?
 
     self.file_name = "#{record_type&.pluralize}-#{Time.now.strftime('%Y%m%d.%M%S%M%L')}.#{exporter_type&.mime_type}"
   end