Harsh Raj Singhania a755455609 serve webdav: escape filename in zip download Content-Disposition header ...

Use mime.FormatMediaType instead of unescaped string concatenation so a
directory name containing a double quote cannot inject extra disposition
parameters.

Fixes #9962

(cherry picked from commit 14a1359c96)

2026-10-08 17:17:11 +01:00

..

dlna

…

docker

…

ftp

…

http

serve http: escape filename in zip download Content-Disposition header

2026-10-08 17:17:11 +01:00

nfs

…

proxy

…

restic

…

s3

serve s3: fix CopyObject of a missing object not returning NoSuchKey

2026-10-08 17:17:11 +01:00

servetest

…

sftp

…

webdav

serve webdav: escape filename in zip download Content-Disposition header

2026-10-08 17:17:11 +01:00

rc_test.go

…

rc.go

…

serve.go

…