Is it necessary to SanitizeFilename()? #118

Activity

1. robschn commented on Apr 23, 2025

   

   robschn

   on Apr 23, 2025

   Last edited by robschn

   More actions

   Adding the calls:

   ❯ curl --user admin:$DAPI_PASS https://proxy.example/dapi/api/v3/services/haproxy/storage/ssl_certificates/api.crt+key.ecdsa
   {"code":404,"message":"missing object: file api_crt_key.ecdsa doesn't exist in dir: /data/haproxy/api/ssl"}
   

   So api.crt+.key.ecdsa is being called as api_crt_key.ecdsa swapping the + for _. We confirmed that this behavior is coming from the SanitizeFilename

   ❯ curl --user admin:$DAPI_PASS https://proxy.example/dapi/api/v3/services/haproxy/storage/ssl_certificates | jq
   [
     {
       "description": "managed SSL file",
       "file": "/data/haproxy/api/ssl/api.crt+key.ecdsa",
       "storage_name": "api.crt+key.ecdsa"
     },
     {
       "description": "managed SSL file",
       "file": "/data/haproxy/api/ssl/api.crt+key.rsa",
       "storage_name": "api.crt+key.rsa"
     }
   ]