R2-2887: Sanitizing user defined filename for bulk exports

primeroIMS · Aug 15, 2024 · dab370d · dab370d
1 parent 53e3372
commit dab370d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/models/bulk_export.rb b/app/models/bulk_export.rb
@@ -102,7 +102,7 @@ def archive!
   end
 
   def generate_file_name
-    return if file_name.present?
+    return self.file_name = ActiveStorage::Filename.new(file_name).sanitized if file_name.present?
 
     self.file_name = "#{record_type&.pluralize}-#{Time.now.strftime('%Y%m%d.%M%S%M%L')}.#{exporter_type&.mime_type}"
   end