The default date format is yyyyMMddhhmmss if not specified.

The exception message for not secure relative path is more clear now.
serenity-is · Jan 24, 2024 · 64c5bf5 · 64c5bf5
1 parent 4cef806
commit 64c5bf5
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/src/Serenity.Net.Core/Helpers/PathHelper.cs b/src/Serenity.Net.Core/Helpers/PathHelper.cs
@@ -1,4 +1,4 @@
-using System.IO;
+using System.IO;
 
 namespace Serenity;
 
@@ -47,7 +47,7 @@ public static string SecureCombine(string root, string relativePath)
             throw new ArgumentNullException(nameof(relativePath));
 
         if (relativePath.Length > 0 && !IsSecureRelativePath(relativePath))
-            throw new ArgumentOutOfRangeException(nameof(relativePath));
+            throw new ArgumentOutOfRangeException(nameof(relativePath), "Invalid characters in path!");
 
         return Path.Combine(root, relativePath);
     }

diff --git a/src/Serenity.Net.Services/Upload/UploadFormatting.cs b/src/Serenity.Net.Services/Upload/UploadFormatting.cs
@@ -1,4 +1,4 @@
-using Serenity.IO;
+using Serenity.IO;
 using Path = System.IO.Path;
 
 namespace Serenity.Web;
@@ -44,7 +44,11 @@ public static string FormatFilename(FormatFilenameOptions options)
         if (string.IsNullOrEmpty(originalName))
             throw new ArgumentNullException(nameof(originalName));
 
-        var formatted = string.Format(options.Format, identity, groupKey, 
+        var formatted = options.Format;
+        if (formatted.Contains("{3}", StringComparison.OrdinalIgnoreCase))
+            formatted = formatted.Replace("{3}", "{3:yyyyMMddhhmmss}");
+
+        formatted = string.Format(formatted, identity, groupKey, 
             TemporaryFileHelper.RandomFileCode(), DateTime.Now,
             Path.GetFileNameWithoutExtension(originalName)) + Path.GetExtension(options.OriginalName);