SecurityFileUploadEventSubscriber::INSECURE_CHARACTERS

Same name and namespace in other branches
  1. 11.x core/modules/system/src/EventSubscriber/SecurityFileUploadEventSubscriber.php \Drupal\system\EventSubscriber\SecurityFileUploadEventSubscriber::INSECURE_CHARACTERS

A PCRE pattern matching characters that are never safe in a filename.

See also

\Drupal\Core\File\FileSystem::createFilename()

File

core/modules/system/src/EventSubscriber/SecurityFileUploadEventSubscriber.php, line 22

Class

SecurityFileUploadEventSubscriber
The final subscriber to 'file.upload.sanitize.name'.

Namespace

Drupal\system\EventSubscriber

Code

protected const INSECURE_CHARACTERS = '@[' . '\\p{Cc}' . '\\p{Cf}' . '`$;|&<>(){}\\[\\]!*?~^\'"\\\\' . '/:' . '#%' . ']@u';

Buggy or inaccurate documentation? Please file an issue. Need support? Need help programming? Connect with the Drupal community.