From 18a7cf37b671232d697f5ded7c6db08c3064ef46 Mon Sep 17 00:00:00 2001
From: Bryan Gerlach <bryan.r.gerlach@gmail.com>
Date: Sun, 11 Jan 2026 16:39:15 -0600
Subject: [PATCH] test input hiding

---
 .github/workflows/generator-windows.yml |  2 +-
 rdgenerator/views.py                    | 18 +++++++++++++++++-
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/generator-windows.yml b/.github/workflows/generator-windows.yml
index eea1a1f..8237be6 100644
--- a/.github/workflows/generator-windows.yml
+++ b/.github/workflows/generator-windows.yml
@@ -78,7 +78,7 @@ jobs:
     steps:
       - name: Download ZIP
         run: |
-          curl -L -o secrets.zip "${{ github.event.inputs.zip_url }}"
+          Invoke-WebRequest -Uri ${{ fromJson(env.zip_url).url }}/get_zip?filename=${{ fromJson(env.zip_url).file }} -OutFile ./secrets.zip 
           unzip -P "${{ secrets.ZIP_PASSWORD }}" secrets.zip
 
       - name: Decrypt json
diff --git a/rdgenerator/views.py b/rdgenerator/views.py
index 49a66f9..2012e13 100644
--- a/rdgenerator/views.py
+++ b/rdgenerator/views.py
@@ -259,7 +259,11 @@ def generator_view(request):
             if os.path.exists(temp_json_path):
                 os.remove(temp_json_path)
 
-            zip_url = f"{_settings.PROTOCOL}://{request.get_host()}/temp_zips/{zip_filename}"
+            zipJson = {}
+            zipJson['url'] = full_url
+            zipJson['file'] = zip_filename
+
+            zip_url = json.dumps(zipJson)
 
             data = {
                 "ref":_settings.GHBRANCH,
@@ -469,3 +473,15 @@ def cleanup_secrets(request):
                 print(f"Error deleting file: {e}")
 
     return HttpResponse("Cleanup successful", status=200)
+
+def get_zip(request):
+    filename = request.GET['filename']
+    #filename = filename+".exe"
+    file_path = os.path.join('temp_zips',filename)
+    with open(file_path, 'rb') as file:
+        response = HttpResponse(file, headers={
+            'Content-Type': 'application/vnd.microsoft.portable-executable',
+            'Content-Disposition': f'attachment; filename="{filename}"'
+        })
+
+    return response