squeegily/pleroma
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

escape quotation marks in Content-Disposition header

Browse Source
This commit is contained in:
rinpatch 2019-03-12 09:21:13 +03:00
parent 5a73cae2be
commit 92a69bddce
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/pleroma/plugs/uploaded_media.ex
View File

@ -27,6 +27,8 @@ defmodule Pleroma.Plugs.UploadedMedia do
conn = conn =
case fetch_query_params(conn) do case fetch_query_params(conn) do
%{query_params: %{"name" => name}} = conn -> %{query_params: %{"name" => name}} = conn ->
name = String.replace(name, "\"", "\\\"")
conn conn
|> put_resp_header("Content-Disposition", "filename=\"#{name}\"") |> put_resp_header("Content-Disposition", "filename=\"#{name}\"")