Sanitize Flask upload filenames before saving
Flask upload handlers should pass filenames through `secure_filename` (or equivalent) before persisting to disk.
#Metadata
#Why it matters
Attacker-controlled filenames enable traversal sequences, extension spoofing, and collisions when saved verbatim.
#Remediation
Generate trusted server-side names or wrap uploads with `werkzeug.utils.secure_filename` before calling `save`.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/python/py.security.flask-unsafe-upload-filename.rule.yaml.