Merge pull request #154 from waifuvault/do-not-expose-file

do not expose hidden filenames
waifuvault · Jun 4, 2024 · 101487d · 101487d
2 parents 815b397 + 50351e2
commit 101487d
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/src/controllers/serve/FileServerController.ts b/src/controllers/serve/FileServerController.ts
@@ -33,7 +33,13 @@ export class FileServerController {
             // unknown> just send an octet stream and let the client figure it out
             res.contentType("application/octet-stream");
         }
-        res.attachment(entry.originalFileName);
+
+        if (entry.settings?.hideFilename) {
+            res.attachment(entry.fullFileNameOnSystem);
+        } else {
+            res.attachment(entry.originalFileName);
+        }
+
         res.send(buff);
     }