From c0edbdbdd6ab164fdbbd157c2e0fa10663d26c36 Mon Sep 17 00:00:00 2001
From: clsr <clsr@clsr.net>
Date: Fri, 5 Feb 2021 08:23:30 +0000
Subject: Fix Content-Disposition filename text filtering

---
 cnhttp.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'cnhttp.go')

diff --git a/cnhttp.go b/cnhttp.go
index f9f9a30..b1e88db 100644
--- a/cnhttp.go
+++ b/cnhttp.go
@@ -1,4 +1,4 @@
-package main
+package main // import "contnet.org/util/cn-http"
 
 import (
 	"bytes"
@@ -274,7 +274,7 @@ func (srv *server) cnpParamsToHTTP(w http.ResponseWriter, resp *cnp.Response) {
 	}
 	if n := resp.Name(); n != "" {
 		w.Header().Set("Content-Disposition", "inline; filename=\""+strings.Map(func(r rune) rune {
-			if r < ' ' || r == ' ' || r == '\'' { // filter out nulls, control codes, newlines and quotes
+			if r < ' ' || r == '"' || r == '\'' { // filter out nulls, control codes, newlines and quotes
 				return -1
 			}
 			return r
-- 
cgit