Commit Graph

2 Commits

Author SHA1 Message Date
RUiNtheExtinct
99624cd2eb fix(server): escape quotes in Content-Disposition ASCII filename
Quotes in filenames would cause malformed Content-Disposition headers:
  filename="file"name.png"  ← Invalid header with unbalanced quotes

Now quotes are replaced with single quotes in the ASCII fallback while
the UTF-8 filename* uses proper percent-encoding (%22).
2025-12-28 14:33:54 +05:30
RUiNtheExtinct
a3324e2b23 fix: RFC 2183/5987 compliant Content-Disposition header in /view endpoint
The Content-Disposition header was missing the required disposition-type
(attachment;) and proper encoding for non-ASCII filenames.

Changes:
- Add `create_content_disposition_header()` helper function
- Update all 4 Content-Disposition headers in view_image endpoint
- Provide ASCII fallback filename for legacy clients
- Add RFC 5987 UTF-8 encoded filename* parameter for international support

This fixes third-party download libraries (e.g., Go's mime.ParseMediaType)
failing to parse the filename correctly.

Fixes #8914
2025-12-28 12:10:56 +05:30