SecurityFileUploadEventSubscriber::INSECURE_CHARACTERS

A PCRE pattern matching characters that are never safe in a filename.

See also

\Drupal\Core\File\FileSystem::createFilename()

File

core/modules/system/src/EventSubscriber/SecurityFileUploadEventSubscriber.php, line 22

Class

SecurityFileUploadEventSubscriber

The final subscriber to 'file.upload.sanitize.name'.

Namespace

Code

protected const INSECURE_CHARACTERS = '@[' . '\\p{Cc}' . '\\p{Cf}' . '`$;|&<>(){}\\[\\]!*?~^\'"\\\\' . '/:' . '#%' . ']@u';