curl: server filename with control characters printed to terminal (`-J`)

Summary: With -OJ, curl takes the filename from the server's Content-Disposition header. parsefilename in src/toolcbhdr.c does not remove control characters such as ESC 0x1b. When a warning prints that name, the escape sequences reach the terminal. Steps to reproduce 1. Build curl from the source...