enforce sanitization of filename (fixes #19)

Gargaj · Mar 25, 2024 · cbbef1f · cbbef1f
1 parent 7d24cdf
commit cbbef1f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Source/Dialogs/DownloadDialog.cs b/Source/Dialogs/DownloadDialog.cs
@@ -10,6 +10,7 @@
 using System.Windows.Forms;
 using Conduit.Sites;
 using Conduit.Unpackers;
+using System.Security.Cryptography;
 
 namespace Conduit
 {
@@ -116,6 +117,8 @@ private async Task<string> DownloadFile(string url, string targetPath)
         MessageBox.Show($"Unable to deduce filename from {finalURL}; will rename it to {filename} and see where it goes...", "Conduit error: Download dodgy", MessageBoxButtons.OK, MessageBoxIcon.Warning);
       }
 
+      filename = string.Join("_", filename.Split(Path.GetInvalidFileNameChars(), StringSplitOptions.RemoveEmptyEntries));
+
       localFileName = Path.Combine(targetPath, filename);
 
       var stream = response.GetResponseStream();