summaryrefslogtreecommitdiff
path: root/django/http/response.py
diff options
context:
space:
mode:
Diffstat (limited to 'django/http/response.py')
-rw-r--r--django/http/response.py4
1 files changed, 3 insertions, 1 deletions
diff --git a/django/http/response.py b/django/http/response.py
index 2bcd549f34..7a0dd688f7 100644
--- a/django/http/response.py
+++ b/django/http/response.py
@@ -575,7 +575,9 @@ class FileResponse(StreamingHttpResponse):
disposition = "attachment" if self.as_attachment else "inline"
try:
filename.encode("ascii")
- file_expr = 'filename="{}"'.format(filename)
+ file_expr = 'filename="{}"'.format(
+ filename.replace("\\", "\\\\").replace('"', r"\"")
+ )
except UnicodeEncodeError:
file_expr = "filename*=utf-8''{}".format(quote(filename))
self.headers["Content-Disposition"] = "{}; {}".format(