From 689f56b837562f49716aa848cc06a0c6c6084b4f Mon Sep 17 00:00:00 2001
From: DrMelone <27028174+Classic298@users.noreply.github.com>
Date: Tue, 27 Jan 2026 23:29:16 +0100
Subject: [PATCH] fix brittle form check for code QL

---
 backend/open_webui/routers/files.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backend/open_webui/routers/files.py b/backend/open_webui/routers/files.py
index 983f25008f..facf032fc5 100644
--- a/backend/open_webui/routers/files.py
+++ b/backend/open_webui/routers/files.py
@@ -19,6 +19,7 @@ from fastapi import (
     status,
     Query,
 )
+from fastapi.params import Form as FormParam
 
 from fastapi.responses import FileResponse, StreamingResponse
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -196,7 +197,7 @@ async def upload_file_handler(
 
     # Handle metadata: when called directly (not via HTTP), Form(None) remains a Form object
     # When called via HTTP, FastAPI resolves it to None or the actual value
-    if metadata is None or (hasattr(metadata, '__class__') and metadata.__class__.__name__ == 'Form'):
+    if metadata is None or isinstance(metadata, FormParam):
         file_metadata = {}
     elif isinstance(metadata, str):
         try: