Signal/Android
1
0
Fork 0
mirror of https://github.com/signalapp/Signal-Android.git synced 2026-08-06 05:14:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Reject dot-only chat names to prevent zip-slip in plaintext export.

Browse Source
This commit is contained in:
Greyson Parrelli
2026-07-10 04:25:09 +00:00
parent 8bc31386a5
commit b60f53f4df
2 changed files with 22 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/src/main/java/org/thoughtcrime/securesms/conversation/plaintext/PlaintextExportRepository.kt
+2 -1
View File
@@ -435,7 +435,8 @@ object PlaintextExportRepository {
@VisibleForTesting
internal fun sanitizeFileName(name: String): String {
return name.replace(Regex("[\\\\/:*?\"<>|]"), "_").trim().take(100)
val sanitized = name.replace(Regex("[\\\\/:*?\"<>|]"), "_").trim().take(100)
return if (sanitized.isEmpty() || sanitized.all { it == '.' }) "chat" else sanitized
}
private fun <T> ExecutorService.submitTyped(callable: Callable<T>): Future<T> {