From 05b405395432901c561eff51e8a2b94c6220ac7e Mon Sep 17 00:00:00 2001 From: NGPixel Date: Sun, 3 Apr 2022 15:51:17 -0400 Subject: [PATCH] fix: encode filenames for assets force download --- server/models/assets.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/models/assets.js b/server/models/assets.js index d7410e60..97dd02c8 100644 --- a/server/models/assets.js +++ b/server/models/assets.js @@ -174,7 +174,7 @@ module.exports = class Asset extends Model { // Force unsafe extensions to download if (WIKI.config.uploads.forceDownload && !['.png', '.apng', '.jpg', '.jpeg', '.gif', '.bmp', '.webp', '.svg'].includes(fileInfo.ext)) { - res.set('Content-disposition', 'attachment; filename=' + fileInfo.base) + res.set('Content-disposition', 'attachment; filename=' + encodeURIComponent(fileInfo.base)) } if (await WIKI.models.assets.getAssetFromCache(assetPath, cachePath, res)) {