mirror of
https://git.pleroma.social/pleroma/pleroma.git
synced 2024-11-20 08:30:59 +00:00
escape quotation marks in Content-Disposition header
This commit is contained in:
parent
5a73cae2be
commit
92a69bddce
1 changed files with 2 additions and 0 deletions
|
@ -27,6 +27,8 @@ defmodule Pleroma.Plugs.UploadedMedia do
|
|||
conn =
|
||||
case fetch_query_params(conn) do
|
||||
%{query_params: %{"name" => name}} = conn ->
|
||||
name = String.replace(name, "\"", "\\\"")
|
||||
|
||||
conn
|
||||
|> put_resp_header("Content-Disposition", "filename=\"#{name}\"")
|
||||
|
||||
|
|
Loading…
Reference in a new issue