From 9694e5da1415fe7c0bbd3424d943565bf37b28d7 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Fri, 22 Nov 2019 20:28:39 +0900
Subject: [PATCH] Fix #1208 remove double escape of '&' character from filename

---
 classes/context/Context.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/classes/context/Context.class.php b/classes/context/Context.class.php
index dc7c8f5a9..abbe9c726 100644
--- a/classes/context/Context.class.php
+++ b/classes/context/Context.class.php
@@ -1282,7 +1282,7 @@ class Context
 					unset($_FILES[$key]);
 					continue;
 				}
-				$val['name'] = escape($val['name'], false);
+				$val['name'] = str_replace('&amp;', '&', escape($val['name'], false));
 				self::set($key, $val, true);
 				self::set('is_uploaded', true);
 				self::$_instance->is_uploaded = true;
@@ -1304,7 +1304,7 @@ class Context
 						break;
 					}
 					$file = array();
-					$file['name'] = $val['name'][$i];
+					$file['name'] = str_replace('&amp;', '&', escape($val['name'][$i], false));
 					$file['type'] = $val['type'][$i];
 					$file['tmp_name'] = $val['tmp_name'][$i];
 					$file['error'] = $val['error'][$i];