if (url.empty()) return url;

std::string result = url;

auto new_end = std::unique(result.begin(), result.end(), [](char a, char b) { return (a == b) && (a == '/'); });

result.erase(new_end, result.end());

if (result.length() > 1 && result.back() == '/') {

result.pop_back();

}

return result;

std::string filename = directory + http_utils::path_separator + http_utils::upload_filename_template;

char *template_filename = strdup(filename.c_str());

int fd = 0;

#if defined(_WIN32)

// only function for win32 which creates unique filenames and can handle a given template including a path

// all other functions like tmpnam() always create filenames in the 'temp' directory

if (0 != _mktemp_s(template_filename, filename.size() + 1)) {

free(template_filename);

throw generateFilenameException("Failed to create unique filename");

}

// as no existing file should be overwritten the operation should fail if the file already exists

// fstream or ofstream classes don't feature such an option

// with the function _sopen_s this can be achieved by setting the flag _O_EXCL

if (0 != _sopen_s(&fd, template_filename, _O_CREAT | _O_EXCL | _O_NOINHERIT, _SH_DENYNO, _S_IREAD | _S_IWRITE)) {

free(template_filename);

throw generateFilenameException("Failed to create file");

}

if (fd == -1) {

free(template_filename);

throw generateFilenameException("File descriptor after successful _sopen_s is -1");

}

_close(fd);

#else // _WIN32

fd = mkstemp(template_filename);

if (fd == -1) {

free(template_filename);

throw generateFilenameException("Failed to create unique file");

}

close(fd);

#endif // _WIN32

std::string ret_filename = template_filename;

free(template_filename);

return ret_filename;

if (filename.empty()) return "";

// Reject filenames containing embedded null bytes. A name like

// "foo.txt\x00.php" would be silently truncated at the null when the

// concatenated path is passed to std::ofstream::open() (which calls

// c_str() and hands a const char* to the OS open() syscall), creating

// a file at the truncated location rather than the full path.

// (CWE-626 / null-byte injection)

if (filename.find('\0') != std::string::npos) return "";

// Find the basename: take everything after the last '/' or '\'

std::string::size_type pos = filename.find_last_of("/\\");

std::string basename = (pos != std::string::npos) ? filename.substr(pos + 1) : filename;

// Reject empty basename, ".", and ".."

if (basename.empty() || basename == "." || basename == "..") {

return "";

}

return basename;

if (val->empty()) return 0;

const std::size_t new_size =

httpserver::detail::unescape_buf_raw(val->data(), val->size());

(*val)[new_size] = '\0'; // add 0-terminator (std::string owns the byte)

val->resize(new_size);

return new_size; // = strlen(val)

std::ifstream fp(filename.c_str(), std::ios::in | std::ios::binary | std::ios::ate);

if (fp.is_open()) {

std::string content;

fp.seekg(0, fp.end);

content.reserve(fp.tellg());

fp.seekg(0, fp.beg);

content.assign((std::istreambuf_iterator<char>(fp)), std::istreambuf_iterator<char>());

return content;

} else {

throw std::invalid_argument("Unable to open file");

}

auto it = map.begin();

auto end = map.end();

if (map.size()) {

os << " " << prefix << " [";

for (; it != end; ++it) {

os << (*it).first << ":\"" << (*it).second << "\" ";

}

os << "]" << std::endl;

}

if (!map.empty()) {

os << " " << prefix << " [";

for (const auto& item : map) {

os << item.first << ":\"" << item.second << "\" ";

}

os << "]" << std::endl;

}

auto it = map.begin();

auto end = map.end();

if (map.size()) {

os << " " << prefix << " [";

for (; it != end; ++it) {

os << (*it).first << ":[";

std::string sep = "";

for (const auto& v : it->second.values) {

os << sep << "\"" << v << "\"";

sep = ", ";

}

os << "] ";

}

os << "]" << std::endl;

}

if ((*s)[0] == 0) return 0;

if (unescaper != nullptr) {

unescaper(*s);

return s->size();

}

return http_unescape(s);