mirror of
https://github.com/rclone/rclone.git
synced 2026-10-09 22:45:26 -04:00
serve webdav: escape filename in zip download Content-Disposition header
Use mime.FormatMediaType instead of unescaped string concatenation so a
directory name containing a double quote cannot inject extra disposition
parameters.
Fixes #9962
(cherry picked from commit 14a1359c96)
This commit is contained in:
500 Internal Server Error
Gitea Version: 1.28.0+dev-477-g8b6ad49a5f