|
|
@ -378,7 +378,11 @@ async fn post_send_file_v2_data( |
|
|
|
}; |
|
|
|
|
|
|
|
match data.data.raw_name() { |
|
|
|
Some(raw_file_name) if raw_file_name.dangerous_unsafe_unsanitized_raw() == send_data.fileName => (), |
|
|
|
Some(raw_file_name) |
|
|
|
if raw_file_name.dangerous_unsafe_unsanitized_raw() == send_data.fileName |
|
|
|
// be less strict only if using CLI, cf. https://github.com/dani-garcia/vaultwarden/issues/5614
|
|
|
|
|| (headers.device.is_cli() && send_data.fileName.ends_with(raw_file_name.dangerous_unsafe_unsanitized_raw().as_str()) |
|
|
|
) => {} |
|
|
|
Some(raw_file_name) => err!( |
|
|
|
"Send file name does not match.", |
|
|
|
format!( |
|
|
|