fix: preserve special characters in uploaded filenames (#13204)
* fix: preserve special characters in uploaded filenames
Change filename sanitization from allowlist to blocklist approach.
Previously only alphanumeric chars and `._-, ` were allowed, stripping
valid characters like parentheses, brackets, braces, exclamation marks,
and unicode punctuation. Now only truly dangerous characters are removed:
path separators (/ \), null bytes, control characters, and Windows-
forbidden characters (< > : " | ? *).
Fixes #11983
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix: add DEL char and shell-dangerous chars to forbidden set, move regex to module level
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* add changeset
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: gradio-pr-bot <gradio-pr-bot@users.noreply.github.com>
