From c9e4a57ee3f5d48556cd13bd8876126d112e984e Mon Sep 17 00:00:00 2001
From: Tom Moor <tom.moor@gmail.com>
Date: Mon, 5 Feb 2024 22:56:04 -0500
Subject: [PATCH] fix: Update filename in attachment creator

---
 server/models/helpers/AttachmentHelper.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/models/helpers/AttachmentHelper.ts b/server/models/helpers/AttachmentHelper.ts
index bad0890d0..380673be0 100644
--- a/server/models/helpers/AttachmentHelper.ts
+++ b/server/models/helpers/AttachmentHelper.ts
@@ -1,6 +1,7 @@
 import { addHours } from "date-fns";
 import { AttachmentPreset } from "@shared/types";
 import env from "@server/env";
+import { ValidateKey } from "@server/validation";
 
 export enum Buckets {
   public = "public",
@@ -30,7 +31,7 @@ export default class AttachmentHelper {
   }) {
     const bucket = acl === "public-read" ? Buckets.public : Buckets.uploads;
     const keyPrefix = `${bucket}/${userId}/${id}`;
-    return `${keyPrefix}/${name}`;
+    return `${keyPrefix}/${ValidateKey.sanitize(name)}`;
   }
 
   /**