fix: encode filenames for assets force download

3 years ago · 05b4053954
parent a50712ea80
commit 05b4053954
1 changed files with 1 additions and 1 deletions
--- a/server/models/assets.js
+++ b/server/models/assets.js
@ -174,7 +174,7 @@ module.exports = class Asset extends Model {

      // Force unsafe extensions to download
      if (WIKI.config.uploads.forceDownload && !['.png', '.apng', '.jpg', '.jpeg', '.gif', '.bmp', '.webp', '.svg'].includes(fileInfo.ext)) {
-        res.set('Content-disposition', 'attachment; filename=' + fileInfo.base)
+        res.set('Content-disposition', 'attachment; filename=' + encodeURIComponent(fileInfo.base))
      }

      if (await WIKI.models.assets.getAssetFromCache(assetPath, cachePath, res)) {