MDL-32889 lib: escape filename in Content-Disposition header

2012-05-09 16:03:33 -04:00
parent e16e2300c5
commit 66969d5004
6 changed files with 7 additions and 7 deletions
@@ -168,6 +168,6 @@ function feedback_get_xml_data($feedbackid) {

 function feedback_send_xml_data($data, $filename) {
    @header('Content-Type: application/xml; charset=UTF-8');
-    @header('Content-Disposition: attachment; filename='.$filename);
+    @header('Content-Disposition: attachment; filename="'.$filename.'"');
    print($data);
 }