refac

backend/open_webui/routers/audio.py

@@ -1194,7 +1194,9 @@ def transcription(
         )
 
     try:
-        ext = file.filename.split(".")[-1]
+        ext = file.filename.split(".")[-1] if file.filename else ""
+        ext = ext.replace("/", "").replace("\\", "").replace("..", "")
+
         id = uuid.uuid4()
 
         filename = f"{id}.{ext}"
@@ -1204,6 +1206,10 @@ def transcription(
         os.makedirs(file_dir, exist_ok=True)
         file_path = f"{file_dir}/{filename}"
 
+        # Defense-in-depth: ensure resolved path stays within intended directory
+        if not os.path.realpath(file_path).startswith(os.path.realpath(file_dir)):
+            raise ValueError("Invalid file path detected")
+
         with open(file_path, "wb") as f:
             f.write(contents)