uploadpath

func Dir ¶

func Dir() string

Dir returns the directory where uploaded attachments are stored: {os.TempDir()}/kojo/upload. Callers create it on demand.

func SanitizeName ¶

func SanitizeName(name string) string

SanitizeName reduces an arbitrary user-supplied filename to a single benign path component. The unified policy is:

1. filepath.Base strips any directory components.
2. "/", "\\" and NUL are replaced with "_".
3. Any other control character (unicode.IsControl) is replaced with "_" — this blocks newline/escape-sequence injection through crafted names that later get echoed into prompts or logs.
4. If the result would be "", "." or ".." (values that are unsafe as a bare path element), it is replaced with "_".

The output is safe to use directly as a filename component under Dir() and safe to join with a prefix ({unixnano}_{name}).