fallback case

Author: wing328

modules/openapi-generator/src/main/resources/python/api_client.mustache

@@ -725,6 +725,8 @@ class ApiClient:
             )
             assert m is not None, "Unexpected 'content-disposition' header value"
             filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f:

samples/client/echo_api/python-disallowAdditionalPropertiesIfNotPresent/openapi_client/api_client.py

@@ -709,6 +709,8 @@ def __deserialize_file(self, response):
             )
             assert m is not None, "Unexpected 'content-disposition' header value"
             filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f:

samples/client/echo_api/python/openapi_client/api_client.py

@@ -709,6 +709,8 @@ def __deserialize_file(self, response):
             )
             assert m is not None, "Unexpected 'content-disposition' header value"
             filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f:

samples/openapi3/client/petstore/python-aiohttp/petstore_api/api_client.py

@@ -718,6 +718,8 @@ def __deserialize_file(self, response):
             )
             assert m is not None, "Unexpected 'content-disposition' header value"
             filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f:

samples/openapi3/client/petstore/python-httpx/petstore_api/api_client.py

@@ -718,6 +718,8 @@ def __deserialize_file(self, response):
             )
             assert m is not None, "Unexpected 'content-disposition' header value"
             filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f:

samples/openapi3/client/petstore/python-lazyImports/petstore_api/api_client.py

@@ -715,6 +715,8 @@ def __deserialize_file(self, response):
             )
             assert m is not None, "Unexpected 'content-disposition' header value"
             filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f:

samples/openapi3/client/petstore/python/petstore_api/api_client.py

@@ -715,6 +715,8 @@ def __deserialize_file(self, response):
             )
             assert m is not None, "Unexpected 'content-disposition' header value"
             filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f: