LibertaCasa/takahe
Archived
9
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Switch to secrets module for upload names

Browse Source
This commit is contained in:
Andrew Godwin 2022-12-03 14:06:55 -07:00
parent c78e446d2f
commit b3df5e763c
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
core/uploads.py
View File

@ -1,6 +1,5 @@
import base64
import os import os
import uuid import secrets
from django.utils import timezone from django.utils import timezone
@ -11,5 +10,5 @@ def upload_namer(prefix, instance, filename):
""" """
now = timezone.now() now = timezone.now()
_, old_extension = os.path.splitext(filename) _, old_extension = os.path.splitext(filename)
new_filename = base64.b32encode(uuid.uuid4().bytes).decode("ascii") new_filename = secrets.token_urlsafe(20)
return f"{prefix}/{now.year}/{now.month}/{now.day}/{new_filename}{old_extension}" return f"{prefix}/{now.year}/{now.month}/{now.day}/{new_filename}{old_extension}"