1
99%
master: 99%

Ran 03 Jun 2026 05:50AM UTC

Files 17

Run time 0s

Badge

Embed ▾

Committed 03 Jun 2026 05:50AM UTC coverage: 99.281% (+0.03%) from 99.248%

Job # 26866364569.1

Build Type

push

github

Committed by

web-flow

Commit Message

fix: build Content-Disposition with HeaderUtils to prevent header injection (#107)

Replaced manual sprintf with Symfony HeaderUtils::makeDisposition, which
safely escapes filenames (quotes, CRLF) rather than interpolating them
raw into the header value. Str::ascii() derives an ASCII fallback
automatically when only a single non-ASCII filename is passed, preserving
full UTF-8 support via filename* without throwing.

The emitted header format changes for ASCII filenames from the redundant
  attachment; filename="x.csv"; filename*=utf-8''x.csv
to the RFC-6266-correct
  attachment; filename=x.csv

Coverage Stats

138 of 139 relevant lines covered (99.28%)

10.99 hits per line

audunru / export-response / 26866364569 / 1
99%
master: 99%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26866364569.1

audunru / export-response / 26866364569 / 1 99% master: 99%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26866364569.1

audunru / export-response / 26866364569 / 1
99%
master: 99%

README BADGES
x