Quote and escape Content-Disposition header

This commit is contained in:
Daniel Barton
2021-02-21 14:41:50 +08:00
parent 7541e769e0
commit 4ed0bf522b
3 changed files with 4 additions and 4 deletions

View File

@@ -52,7 +52,7 @@ func getDownloadBackup(c *gin.Context) {
defer f.Close()
c.Header("Content-Length", strconv.Itoa(int(st.Size())))
c.Header("Content-Disposition", "attachment; filename="+st.Name())
c.Header("Content-Disposition", "attachment; filename="+strconv.Quote(st.Name()))
c.Header("Content-Type", "application/octet-stream")
bufio.NewReader(f).WriteTo(c.Writer)
@@ -96,7 +96,7 @@ func getDownloadFile(c *gin.Context) {
}
c.Header("Content-Length", strconv.Itoa(int(st.Size())))
c.Header("Content-Disposition", "attachment; filename="+st.Name())
c.Header("Content-Disposition", "attachment; filename="+strconv.Quote(st.Name()))
c.Header("Content-Type", "application/octet-stream")
bufio.NewReader(f).WriteTo(c.Writer)