Security: c.Attachment and c.Inline should escape filename in `Content-Disposition` header#2541

Merged

aldas merged 1 commit intolabstack:masterfrom aldas:quote_filename

Nov 7, 2023

+65-21

Commits on Nov 7, 2023

Security: c.Attachment and c.Inline should escape name in Content-Disposition header to avoid 'Reflect File Download' vulnerability.
aldas
committed