diff --git a/spring-web/src/main/java/org/springframework/http/codec/multipart/FilePartEvent.java b/spring-web/src/main/java/org/springframework/http/codec/multipart/FilePartEvent.java index 883d29ac2e..aecd92e170 100644 --- a/spring-web/src/main/java/org/springframework/http/codec/multipart/FilePartEvent.java +++ b/spring-web/src/main/java/org/springframework/http/codec/multipart/FilePartEvent.java @@ -125,7 +125,7 @@ public interface FilePartEvent extends PartEvent { Assert.notNull(path, "Path must not be null"); return Flux.defer(() -> { - String pathName = path.toString(); + String pathName = StringUtils.cleanPath(path.toString()); MediaType contentType = MediaTypeFactory.getMediaType(pathName) .orElse(MediaType.APPLICATION_OCTET_STREAM); String filename = StringUtils.getFilename(pathName);