When downloading a ZIP file with various browsers, we noticed that even when Content-Disposition: attachment was set, the ZIP file sometimes downloaded with an HTML extension or, worse, displayed in the window instead of being downloaded at all.

This behavior seems to be due to the fact that, while the filename= parameter is provided with the header, no filename is actually specified. Adding a filename appears to correct the behavior.