Github-Mirror/pocketbase
1
0 Fork 0
mirror of https://github.com/pocketbase/pocketbase.git synced 2026-10-13 01:28:16 +02:00
Code Issues Packages Projects Releases Wiki Activity

added quotes for the default Content-Disposition serving filename in case custom name with special characters is provided

Browse Source
This commit is contained in:
Gani Georgiev committed 2026-08-02 20:18:02 +03:00
1 parent 4c6c166603
commit b259534df7
3 files changed
+13 -11
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

tools/filesystem/filesystem.go
+1 -1
View File
@@ -464,7 +464,7 @@ func (s *System) Serve(res http.ResponseWriter, req *http.Request, fileKey strin
extContentType = ct
}
setHeaderIfMissing(res, "Content-Disposition", disposition+"; filename="+name)
setHeaderIfMissing(res, "Content-Disposition", disposition+"; filename="+strconv.Quote(name))
setHeaderIfMissing(res, "Content-Type", extContentType)
setHeaderIfMissing(res, "Content-Security-Policy", "default-src 'none'; media-src 'self'; style-src 'unsafe-inline'; sandbox")