A simple HTTP Module that implements a workaround for a common bug in ASP.NET applications that prevents downloading of files with comma in the filename. When a Chrome browser downloads a file that have a comma in its file name, according to the RFC6266 the file name must be enclosed in quotes. If not the browser simply prevents the download with the following message:
Duplicate headers received from server Error 349 (net::ERRRESPONSEHEADERSMULTIPLECONTENT_DISPOSITION): Multiple Content-Disposition headers received. This is disallowed to protect against HTTP response splitting attacks.
Very few applications does this right, and even SharePoint and Office 365 are affected by this bug. On https://bitbucket.org/klinkby/workaround-for-content-disposition-bug-in-asp.net-sharepoint/ I have published a source and binaries for a simple HTTP module that plugs in to an existing application, examines responses, looking for those ill formatted filenames in content-disposition headers using an efficient regular expression. Those affected are corrected and returned to the client, thus allowing Chrome to download the files. To use the module add the dll to the GAC or the bin folder, and register the module in the application’s web.config file in the system.webserver element: