Steps to reproduce

• Create a file locally with a filename that includes spaces, e. g. Foo Bar.txt
• Use Firefox
• Store the file as a process variable
• Download the file e.g., via GET /variable-instance/[VARIABLE_INSTANCE_ID]/data and store it on your local machine

Expected behavior

When you check your download folder, the file should be stored as Foo Bar.txt

Observed behavior

The file is stored as Foo

Problem

The content-disposition header looks as follows:

Content-Disposition: attachment; filename=Foo Bar.bpmn

Solution

The filename in the content-disposition header should be a double-quoted string:

Content-Disposition: attachment; filename="Foo Bar.bpmn"

Hints

• The problem does not occur in Google Chrome
• [1] states that the filename needs to be a double-quoted string

[1] https://www.w3.org/Protocols/rfc2616/rfc2616-sec19.html#sec19.5.1