From 7d8cd8a89d2b29b429dc526b537332fb037bd98e Mon Sep 17 00:00:00 2001
From: Timothy Allen <tim@treehouse.org.za>
Date: Sat, 26 Sep 2026 03:48:09 +0200
Subject: [PATCH] Refuse an upload name that ends in a new line.

---
 get_data.lib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/get_data.lib.php b/get_data.lib.php
index f6302ce..f8c4ebf 100644
--- a/get_data.lib.php
+++ b/get_data.lib.php
@@ -374,7 +374,7 @@ function upload_dir() {
 }
 
 function is_upload_name($name) {
-  return is_string($name) && preg_match('/^[0-9a-f]{32}$/', $name);
+  return is_string($name) && preg_match('/^[0-9a-f]{32}\z/', $name);
 }
 
 /*