mirrors/takahe
1
1
Fork 0
mirror of https://github.com/jointakahe/takahe.git synced 2024-11-26 09:11:00 +00:00
Code Issues Projects Releases Packages Wiki Activity

Switch to secrets module for upload names

Browse source
This commit is contained in:
Andrew Godwin 2022-12-03 14:06:55 -07:00
parent c78e446d2f
commit b3df5e763c
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
core/uploads.py
View file

@ -1,6 +1,5 @@
import base64
import os import os
import uuid import secrets
from django.utils import timezone from django.utils import timezone
@ -11,5 +10,5 @@ def upload_namer(prefix, instance, filename):
""" """
now = timezone.now() now = timezone.now()
_, old_extension = os.path.splitext(filename) _, old_extension = os.path.splitext(filename)
new_filename = base64.b32encode(uuid.uuid4().bytes).decode("ascii") new_filename = secrets.token_urlsafe(20)
return f"{prefix}/{now.year}/{now.month}/{now.day}/{new_filename}{old_extension}" return f"{prefix}/{now.year}/{now.month}/{now.day}/{new_filename}{old_extension}"