Fabio/brouter
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Merge pull request #158 from bagage/fix-content-disposition-header

Browse source 
Content-Disposition filename must be quoted
This commit is contained in:
abrensch 2019-05-18 19:42:24 +02:00 committed by GitHub
commit 33dac24f7a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
brouter-server/src/main/java/btools/server/RouteServer.java
View file

@ -392,7 +392,7 @@ public class RouteServer extends Thread
bw.write( "Content-Type: " + mimeType + "; charset=utf-8\n" ); bw.write( "Content-Type: " + mimeType + "; charset=utf-8\n" );
if ( fileName != null ) if ( fileName != null )
{ {
bw.write( "Content-Disposition: attachment; filename=" + fileName + "\n" ); bw.write( "Content-Disposition: attachment; filename=\"" + fileName + "\"\n" );
} }
bw.write( "Access-Control-Allow-Origin: *\n" ); bw.write( "Access-Control-Allow-Origin: *\n" );
if ( headers != null ) if ( headers != null )

2
brouter-server/src/main/java/btools/server/request/ServerHandler.java
View file

@ -191,7 +191,7 @@ public class ServerHandler extends RequestHandler {
if ( format != null ) if ( format != null )
{ {
fileName = ( params.get( "trackname" ) == null ? "brouter" : params.get( "trackname" ) ) + "." + format; fileName = ( params.get( "trackname" ) == null ? "brouter" : params.get( "trackname" ).replaceAll("[^a-zA-Z0-9 \\._\\-]+", "") ) + "." + format;
} }
return fileName; return fileName;