From 260429af0cced2273eb6049a80ee008e461430c9 Mon Sep 17 00:00:00 2001
From: Mikael Finstad <finstaden@gmail.com>
Date: Wed, 29 Apr 2026 22:01:07 +0800
Subject: [PATCH] don't generate uuid on client

it should be generated in companion or on the server
for security reasons (client code can easily be hijacked)
---
 packages/@uppy/aws-s3/src/index.ts | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/packages/@uppy/aws-s3/src/index.ts b/packages/@uppy/aws-s3/src/index.ts
index e195d2c6e..7f0dbd511 100644
--- a/packages/@uppy/aws-s3/src/index.ts
+++ b/packages/@uppy/aws-s3/src/index.ts
@@ -334,10 +334,7 @@ export default class AwsS3<M extends Meta, B extends Body> extends BasePlugin<
   }
 
   #generateKey(file: UppyFile<M, B>): string {
-    return (
-      this.opts.generateObjectKey?.(file) ??
-      `${crypto.randomUUID()}-${file.name}`
-    )
+    return this.opts.generateObjectKey?.(file) ?? file.name
   }
 
   // --------------------------------------------------------------------------