fix lack of escaping of filename in Content-Disposition (#3556)

fix lack of escaping of filename in Content-Disposition (#3556) #1127