www: validate and check filenames in URLs

We shall ensure links continue working for this.

1 files changed, 1 insertions, 1 deletions

diff --git a/lib/PublicInbox/View.pm b/lib/PublicInbox/View.pm
index 326da4cb..2303a1fa 100644
--- a/lib/PublicInbox/View.pm
+++ b/lib/PublicInbox/View.pm
@@ -262,7 +262,7 @@ sub attach_link ($$$$) {
         $desc = '' unless defined $desc;
         $desc = ': '.$desc if $desc;
         my $sfn;
-        if (defined $fn && $fn =~ /\A[\w-]+\.[a-z0-9]+\z/) {
+        if (defined $fn && $fn =~ /\A[\w\.-]+[a-zA-Z0-9]\z/) {
                 $sfn = $fn;
         } elsif ($ct eq 'text/plain') {
                 $sfn = 'a.txt';