修复报销附件上传与中文文件名（07-28-travel-reimbursement-guide）

server/src/routes/invoicePool/read.js

@@ -4,6 +4,7 @@ const { AppError } = require("../../utils/AppError");
 const { sendData } = require("../../utils/reply");
 const { buildAuditLogData } = require("../../utils/audit");
 const { signPayload, verifyToken } = require("../../utils/signedUrl");
+const { buildAttachmentContentDisposition } = require("../../utils/contentDisposition");
 const { openReadStream, StorageNotFoundError } = require("../../services/storage");
 const { toMoneyString } = require("../../utils/workflow");
 const { resolveInvoiceAvailability } = require("../../services/invoiceGovernance");
@@ -31,11 +32,6 @@ const invoiceStatusQuerySchema = z.object({
   ids: z.string().trim().min(1).max(2000),
 });
 
-function sanitizeFilename(fileName) {
-  if (!fileName) return "file";
-  return fileName.replace(/[\r\n"]/g, "_");
-}
-
 function parseInvoiceListQuery(query) {
   const parsed = invoiceListQuerySchema.safeParse(query ?? {});
   if (!parsed.success) {
@@ -634,7 +630,7 @@ function registerInvoicePoolReadRoutes(fastify) {
     reply.type(invoice.mime_type || "application/octet-stream");
     reply.header(
       "content-disposition",
-      `inline; filename=\"${sanitizeFilename(invoice.original_name)}\"`,
+      buildAttachmentContentDisposition(invoice.original_name, { disposition: "inline" }),
     );
     return reply.send(stream);
   });