fix: Sanitize filename (#352)

This commit is contained in:
Kroese 2024-01-19 04:01:07 +01:00 committed by GitHub
parent 911a775a90
commit c49ac1569f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -20,10 +20,11 @@ if [ -z "$BOOT" ]; then
fi
BASE=$(basename "$BOOT")
BASE="${BASE%%\?*}"
[ -f "$STORAGE/$BASE" ] && return 0
BASE=$(basename "${BOOT%%\?*}")
: "${BASE//+/ }"; printf -v BASE '%b' "${_//%/\\x}"
BASE=$(echo "$BASE" | sed -e 's/[^A-Za-z0-9._-]/_/g')
[ -f "$STORAGE/$BASE" ] && return 0
TMP="$STORAGE/${BASE%.*}.tmp"