Signal/Desktop
1
0
Fork 0
mirror of https://github.com/signalapp/Signal-Desktop.git synced 2026-04-21 08:58:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Strip filenames for visual media attachments during upload

Browse Source
This commit is contained in:
yash-signal
2025-06-09 11:46:55 -05:00
committed by GitHub
parent 9d5ab04195
commit 4a6e2d297b
3 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
ts/util/uploadAttachment.ts
View File

@@ -22,6 +22,7 @@ import {
} from '../AttachmentCrypto';
import { missingCaseError } from './missingCaseError';
import { uuidToBytes } from './uuidToBytes';
import { isVisualMedia } from '../types/Attachment';
const CDNS_SUPPORTING_TUS = new Set([3]);
@@ -42,8 +43,10 @@ export async function uploadAttachment(
uploadType: 'standard',
});
const { blurHash, caption, clientUuid, fileName, flags, height, width } =
attachment;
const { blurHash, caption, clientUuid, flags, height, width } = attachment;
// Strip filename for visual media (images and videos) to prevent metadata leakage
const fileName = isVisualMedia(attachment) ? undefined : attachment.fileName;
return {
cdnKey,