Ticket #50855: sanitize-file-name.patch

wp-includes/formatting.php

@@ -2006 +2006 @@
                 $filename = preg_replace( "#\x{00a0}#siu", ' ', $filename );
         }
 
+        $filename = str_replace( array( '%20', '+' ), '-', $filename );
+
         /**
          * Filters the list of characters to remove from a filename.
          *
@@ -2017 +2019 @@
         $special_chars = apply_filters( 'sanitize_file_name_chars', $special_chars, $filename_raw );
 
         $filename = str_replace( $special_chars, '', $filename );
-        $filename = str_replace( array( '%20', '+' ), '-', $filename );
         $filename = preg_replace( '/[\r\n\t -]+/', '-', $filename );
         $filename = trim( $filename, '.-_' );