knova/akkoma
1
0
Fork 0
forked from AkkomaGang/akkoma
Code Issues Pull requests Projects Releases Packages Wiki Activity

escape quotation marks in Content-Disposition header

Browse source
This commit is contained in:
rinpatch 2019-03-12 09:21:13 +03:00
parent 5a73cae2be
commit 92a69bddce
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/pleroma/plugs/uploaded_media.ex
View file

@ -27,6 +27,8 @@ def call(%{request_path: <<"/", @path, "/", file::binary>>} = conn, opts) do
conn = conn =
case fetch_query_params(conn) do case fetch_query_params(conn) do
%{query_params: %{"name" => name}} = conn -> %{query_params: %{"name" => name}} = conn ->
name = String.replace(name, "\"", "\\\"")
conn conn
|> put_resp_header("Content-Disposition", "filename=\"#{name}\"") |> put_resp_header("Content-Disposition", "filename=\"#{name}\"")