Use filepath.Base to sanitize path for archive downloads (#7805)

cli · Aug 7, 2023 · e0d2fc8 · e0d2fc8
1 parent f777bec
commit e0d2fc8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/cmd/release/download/download.go b/pkg/cmd/release/download/download.go
@@ -290,7 +290,7 @@ func downloadAsset(dest *destinationWriter, httpClient *http.Client, assetURL, f
 			return fmt.Errorf("unable to parse file name of archive: %w", err)
 		}
 		if serverFileName, ok := params["filename"]; ok {
-			fileName = filepath.Clean(serverFileName)
+			fileName = filepath.Base(serverFileName)
 		} else {
 			return errors.New("unable to determine file name of archive")
 		}