wizardchen e0c1b77b70 fix: quote Content-Disposition filename and add empty-title fallback ...

- Use mime.FormatMediaType for both attachment and inline Content-Disposition
  headers in DownloadKnowledgeFile and the preview handler, preventing header
  injection via a user-controlled knowledge title (e.g. containing ';' or '=')
- Extract inline sanitize logic into sanitizeManualDownloadFilename helper and
  add a blank/whitespace-only title fallback to "untitled" so the download
  never produces a degenerate ".md" filename

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-16 18:01:07 +08:00

..

session

Merge remote-tracking branch 'wizard/main'

2026-03-16 11:13:53 +08:00

auth.go

fix: improve auth error messages and unify username validation length

2026-03-15 23:59:50 +08:00

chunk.go

feat(api): enhance organization shared knowledge base and agent functionalities

2026-02-09 11:40:25 +08:00

custom_agent.go

feat(agent): enhance agent and skill management features

2026-02-09 11:40:25 +08:00

evaluation.go

feat: 新增API Key认证支持，优化Swagger文档安全配置

2025-12-22 15:01:09 +08:00

faq.go

feat(api): enhance organization shared knowledge base and agent functionalities

2026-02-09 11:40:25 +08:00

im.go

feat: implement IM channel management in agent editor

2026-03-16 02:28:10 +08:00

initialization.go

refactor: update LLM configuration to model ID in API and frontend

2026-03-16 02:26:47 +08:00

knowledge.go

fix: quote Content-Disposition filename and add empty-title fallback

2026-03-16 18:01:07 +08:00

knowledgebase.go

feat: enhance knowledge update functionality

2026-03-16 02:26:47 +08:00

mcp_service.go

feat: add built-in MCP service support

2026-03-05 21:57:01 +08:00

message.go

feat: implement chat history and retrieval settings

2026-03-09 11:46:56 +08:00

model.go

feat: 新增对多家平台的模型适配

2025-12-29 12:18:42 +08:00

organization.go

feat: enhance document loading and state management in doc-content component

2026-03-02 21:21:49 +08:00

skill_handler.go

feat: update sandbox service configuration in Docker Compose files

2026-02-04 21:34:07 +08:00

system.go

feat(storage): 集成S3存储适配器

2026-03-09 10:39:46 +08:00

tag.go

feat: enhance document loading and state management in doc-content component

2026-03-02 21:21:49 +08:00

tenant.go

feat: implement chat history and retrieval settings

2026-03-09 11:46:56 +08:00

web_search.go

refactor: web search provider registry pattern

2026-01-20 18:19:44 +08:00