From bfb9bbb0bfc9cd51381a70f98ab6075cb2aa7341 Mon Sep 17 00:00:00 2001
From: Hermes Agent <agent@hermes>
Date: Tue, 14 Apr 2026 19:35:53 +0000
Subject: [PATCH] fix: use _content_disposition_value() for RFC 5987 filename
 encoding in /api/media

---
 api/routes.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/routes.py b/api/routes.py
index 777c7c1..260866a 100644
--- a/api/routes.py
+++ b/api/routes.py
@@ -1575,12 +1575,12 @@ def _handle_media(handler, parsed):
     if mime in _DOWNLOAD_TYPES or mime not in _INLINE_IMAGE_TYPES:
         handler.send_header(
             "Content-Disposition",
-            f'attachment; filename="{target.name}"',
+            _content_disposition_value("attachment", target.name),
         )
     else:
         handler.send_header(
             "Content-Disposition",
-            f'inline; filename="{target.name}"',
+            _content_disposition_value("inline", target.name),
         )
 
     handler.end_headers()