coderedcorp / coderedcorp/coderedcms

Secure file upload - email link is incorrect

Offen
#670 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Type: Bug
Vorherrschende Sprache
Python
Sterne
765
Forks
154
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

I've created a job application form that has a secure file upload for CVs/Resumes.
When we receive the email with the application form information we also get a link to the uploaded file, which should only accessible when logged into the admin panel.

However, when I log in the link still goes to a "Page Not Found" page.

If I download the form data (the data doesn't fit on the form view page, might be another issue), the link is to the specific file, i.e. example.com/protected/[encrypted_name]/[file_name].pdf
The link in the email includes white space, and so doesn't highlight the full link, it just shows the bit up to the white space and then continues the text outside of the link.

#### Steps to reproduce
Steps to reproduce the behavior:
Create web form with upload file.
Upload file with file name like: "This is an example.docx"
email received will show: http://example.com/protected/[encrypted_name]/This (LINK) is an example.docx (NOT LINK)

#### Expected behavior
Filename should be encoded for web so that the link displays properly in the email.

Beitragsleitfaden

Für dieses Repository ist kein Beitragsleitfaden indexiert

Rechercherichtung

No file or test is named in the issue. Start by reproducing a secure upload whose filename contains spaces and trace the email link generation; done means the complete protected-file URL is encoded and rendered as one clickable link, while the admin access behavior remains intact.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
django, python
Bereich
backend
Issue-Typ
Bug
Schwierigkeit
2/5
Geschätzter Aufwand
1-3 Stunden
Aktivitätsstatus
Veraltet
Klarheit
Klar beschrieben
Anfängerfreundlichkeit
48/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.