diff --git a/pagure/ui/repo.py b/pagure/ui/repo.py index ab1cab8..7ed3482 100644 --- a/pagure/ui/repo.py +++ b/pagure/ui/repo.py @@ -669,7 +669,9 @@ def new_release(repo, username=None): filename = werkzeug.secure_filename(filestream.filename) try: filestream.save( - os.path.join(APP.config['UPLOAD_FOLDER_PATH'], filename)) + os.path.join(APP.config['UPLOAD_FOLDER_PATH'], + werkzeug.secure_filename(repo.fullname), + filename)) flask.flash('File uploaded') except Exception as err: # pragma: no cover APP.logger.exception(err)