Sanitize filenames before using in Content-Disposition header
This commit is contained in:

committed by
Herman van Rink

parent
e11e55cb06
commit
ae20845e36
@@ -70,7 +70,7 @@ if (isset($ct) && !empty($ct)) {
|
|||||||
header($content_type);
|
header($content_type);
|
||||||
|
|
||||||
if (isset($cn) && !empty($cn)) {
|
if (isset($cn) && !empty($cn)) {
|
||||||
header('Content-Disposition: attachment; filename=' . $cn);
|
header('Content-Disposition: attachment; filename=' . PMA_sanitize_filename($cn));
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!isset($resize)) {
|
if (!isset($resize)) {
|
||||||
|
Reference in New Issue
Block a user