Harsh Raj Singhania 0e6ed13131 serve http: escape filename in zip download Content-Disposition header ...

Use mime.FormatMediaType instead of unescaped string concatenation so a
directory name containing a double quote cannot inject extra disposition
parameters.

Fixes #9962

(cherry picked from commit 661484f36c)

2026-10-08 17:17:11 +01:00

..

testdata

serve http: download folders as zip

2025-09-26 15:18:02 +01:00

favicon.png

serve http: add fallback embedded favicon

2026-02-25 12:48:17 +00:00

http_test.go

serve webdav,http: fix crash when the server fails to start - fixes #9882

2026-10-08 17:17:09 +01:00

http.go

serve http: escape filename in zip download Content-Disposition header

2026-10-08 17:17:11 +01:00