scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-10-09 03:18:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

refac

Browse source
This commit is contained in:
Timothy Jaeryang Baek 2026-03-01 13:28:32 -06:00
parent 0fff2fbcab
commit 62ab30f593
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
backend/open_webui/routers/audio.py
View file

@ -1194,7 +1194,9 @@ def transcription(
)
try:
ext = file.filename.split(".")[-1]
ext = file.filename.split(".")[-1] if file.filename else ""
ext = ext.replace("/", "").replace("\\", "").replace("..", "")
id = uuid.uuid4()
filename = f"{id}.{ext}"
@ -1204,6 +1206,10 @@ def transcription(
os.makedirs(file_dir, exist_ok=True)
file_path = f"{file_dir}/{filename}"
# Defense-in-depth: ensure resolved path stays within intended directory
if not os.path.realpath(file_path).startswith(os.path.realpath(file_dir)):
raise ValueError("Invalid file path detected")
with open(file_path, "wb") as f:
f.write(contents)