Update app.py

app.py

@@ -176,15 +176,38 @@ def create_file(filename, prompt, response, is_image=False):
     with open(filename, "w", encoding="utf-8") as f:
         f.write(prompt + "\n\n" + response)
 
+def sanitize_filename(filename):
+    import string
+    # Characters not allowed in Windows filenames
+    windows_disallowed_chars = '<>:"\\|?*'
+
+    # Characters not allowed in Unix/Linux filenames
+    linux_disallowed_chars = '/'
+
+    # Additional disallowed characters (non-printable ASCII characters)
+    additional_disallowed_chars = ''.join(chr(i) for i in range(32))
+
+    # Combined set of disallowed characters
+    disallowed_chars = windows_disallowed_chars + linux_disallowed_chars + additional_disallowed_chars
+
+    # Remove disallowed characters
+    sanitized_filename = ''.join(c for c in filename if c not in disallowed_chars and c in string.printable)
+
+    return sanitized_filename
+
 
 # Now filename length protected for linux and windows filename lengths
 def save_image(image, filename):
     max_filename_length = 250
     filename_stem, extension = os.path.splitext(filename)
     truncated_stem = filename_stem[:max_filename_length - len(extension)] if len(filename) > max_filename_length else filename_stem
-    filename = f"{truncated_stem}{extension}"
-    with open(filename, "wb") as f:
-        f.write(image.getbuffer())
+    filename = f"{truncated_s  tem}{extension}"
+    filename = sanitize_filename(filename)
+    try:
+        with open(filename, "wb") as f:
+            f.write(image.getbuffer())
+    except:
+        errored=True
     return filename
         
 def extract_boldface_terms(text):
@@ -212,9 +235,14 @@ def process_image(image_input, user_prompt):
             data=False
         else:
             #image_file_name = image_input.name
-            image_file_name = image_input.filename
-            image_input = image_input.read()
+            image_bytes = image_input.read()
             SaveNewFile=True
+            try:
+                if (image_input.filename is not None):
+                    image_file_name = image_input.filename
+            except:
+                image_file_name = image_input.name
+                image_input = image_bytes # this should allow new posts to ssave and to flow through bytes
     
     st.markdown('Processing image: ' + image_file_name)
     base64_image = base64.b64encode(image_input).decode("utf-8")