- changed to double quotes around file name (.NET compatibility - tha…

…nks @nealpoole)

crossdomain-upload/evil/upload.html

@@ -69,7 +69,7 @@ <h1>Arbitrary file upload</h1>
 	  }
 
 	  var body = "--" + boundary + "\r\n";
-	  body += "Content-Disposition: form-data; name='contents'; filename='" + fileName + "'\r\n";
+	  body += "Content-Disposition: form-data; name=\"contents\"; filename=\"" + fileName + "\"\r\n";
 	  body += "Content-Type: application/octet-stream\r\n\r\n";
 	  body += fileData + "\r\n";
 	  body += "--" + boundary + "--";