tempfile generation issue from user generated filename in ruby/OS

Problem

We used a super simple code in ruby to generate tempfiles with dynamic filename.

temp_file = Tempfile.new([title, '.pdf'])

where title is a variable value (Input taken from user).so if your insert special or not allowed/expected character as a filename in any Operating system this code will fail. Well this is not related to Ruby directly as its a filename constraint in every Operating system but it happened to us via Ruby code.

Solution

temp_file = Tempfile.new([title.gsub(/[^\w\.]/, '_'), '.pdf'])

Pretty simple solution to remove/Replace not allowed values there. This is very minor thing to correct as well to take notes, but we had exception from production and that is not acceptable at all.

And if you get stuck… Ask Here

email me rajeevsharma86@gmail.com

Avatar
Rajeev Sharma
Technical Lead

software entrepreneur and father of a fairy tale!!!.

Related