Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Line 81-85 file.Filename SHOULD NOT be trusted #2

Closed
OlivierLaflamme opened this issue Feb 12, 2020 · 1 comment
Closed

Line 81-85 file.Filename SHOULD NOT be trusted #2

OlivierLaflamme opened this issue Feb 12, 2020 · 1 comment

Comments

@OlivierLaflamme
Copy link
Owner

Apparently: The filename is always optional and must not be used blindly by the application: path information should be stripped, and conversion to the server file system rules should be done.

the issue here is how to upload array of files like the following,
curl -X POST http://localhost:80/upload -F "images[]=@/home/amp/hack/property1.jpg" -F "images[]=@/home/ack/property2.jpeg" -H "Content-Type: multipart/form-data"

you cant with my code as it stands it cant support multiple file uploads...

gin-gonic/gin#774

@OlivierLaflamme
Copy link
Owner Author

add to TODO

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant