odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] escape returned database backup and exported data filenames 

bzr revid: giedrius@inovera.lt-20121031155310-htyh0qdvsxudnm59
This commit is contained in:
Giedrius Slavinskas 2012-10-31 17:53:10 +02:00
parent d4295fa050
commit 70cbf251f1
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
addons/web/controllers/main.py
View File

@ -855,7 +855,7 @@ class Database(openerpweb.Controller):
}
return req.make_response(db_dump,
[('Content-Type', 'application/octet-stream; charset=binary'),
('Content-Disposition', 'attachment; filename="' + filename + '"')],
('Content-Disposition', content_disposition(filename, req))],
{'fileToken': int(token)}
)
except xmlrpclib.Fault, e:
@ -1864,7 +1864,8 @@ class Export(View):
return req.make_response(self.from_data(columns_headers, import_data),
headers=[('Content-Disposition', 'attachment; filename="%s"' % self.filename(model)),
headers=[('Content-Disposition',
content_disposition(self.filename(model), req)),
('Content-Type', self.content_type)],
cookies={'fileToken': int(token)})