🐛 Escape fname

gofiber · Jul 10, 2020 · f698b5d · f698b5d
1 parent fc5d2d7
commit f698b5d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ctx.go b/ctx.go
@@ -196,7 +196,7 @@ func (ctx *Ctx) Attachment(filename ...string) {
 	if len(filename) > 0 {
 		fname := filepath.Base(filename[0])
 		ctx.Type(filepath.Ext(fname))
-		ctx.Set(HeaderContentDisposition, `attachment; filename="`+fname+`"`)
+		ctx.Set(HeaderContentDisposition, `attachment; filename="`+url.QueryEscape(fname)+`"`)
 		return
 	}
 	ctx.Set(HeaderContentDisposition, "attachment")