form-data

form-data: CRLF injection in Content-Disposition headers

CRLF injection vulnerability in form-data library: field names and filenames are not escaped when building Content-Disposition hea