Sanitize filenames before using in Content-Disposition header
This commit is contained in:

committed by
Herman van Rink

parent
e11e55cb06
commit
ae20845e36
@@ -70,7 +70,7 @@ if (isset($ct) && !empty($ct)) {
|
||||
header($content_type);
|
||||
|
||||
if (isset($cn) && !empty($cn)) {
|
||||
header('Content-Disposition: attachment; filename=' . $cn);
|
||||
header('Content-Disposition: attachment; filename=' . PMA_sanitize_filename($cn));
|
||||
}
|
||||
|
||||
if (!isset($resize)) {
|
||||
|
Reference in New Issue
Block a user