In case anyone else is wondering how double quotes in filenames (e.g. file"name.csv) are handled here are my findings.
Firefox escapes them like this \" which works fine with cherrypy.
Chrome escapes them using %22 which makes it impossible to differentiate between file"name.csv and file%22name.csv.
A discussion about this on w3: multipart/form-data filename encoding: unicode and special characters
Originally reported by: Shy Pike (Bitbucket: shypike, GitHub: @shypike
When a header contains a value between quotes and that value contains a semicolon
";", the header will not be parsed properly.
Example from a "Content-Disposition" header:
The cause is cherrypy/lib/httputil.py, line 148, function parse().
That code is too simple, it splits in the middle of the file name.
The text was updated successfully, but these errors were encountered: