https://bz.apache.org/bugzilla/show_bug.cgi?id=59115
--- Comment #3 from Udo Schnurpfeil <lof...@apache.org> --- I've made some tests with different browsers and I found these encodings in the filename part: (filename) -> (content-disposition) : -> : / -> : \ -> \ \\ -> \ " -> \" (Firefox) and %22 (Chrome+Safari) %22 -> %22 This leads to 3 problems: 1. The resulting string : doesn't differ between : and / so there is not possibility to know what was the source. 2. The resulting string \ doesn't differ between \\ and \ so there is also not possibility to find the source. 3. In Chrome+Safari we cannot differ between " and %22 I know these character are unusual, but not invalid on some OS. For the moment I have best results with this code: fileName = fileName.trim().replaceAll("\\\\\\\"", "\""); // replaces \" with " I don't know which RFC is relevant here? But it looks for me, that we have different file names resulting in same header information. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org