diff --git a/app/controllers/repositories_controller.rb b/app/controllers/repositories_controller.rb
index 6d1887550..ad7acc986 100644
--- a/app/controllers/repositories_controller.rb
+++ b/app/controllers/repositories_controller.rb
@@ -309,7 +309,7 @@ class RepositoriesController < ApplicationController
     api_url = GiteaService.gitea_config[:base_url]
     tip_exception('不可访问') if params[:filepath].to_s.include?("chinese_dictionary.txt")
 
-    url = "/repos/#{@owner.login}/#{@repository.identifier}/raw/#{URI.escape(params[:filepath])}?ref=#{URI.escape(params[:ref])}"
+    url = "/repos/#{@owner.login}/#{@repository.identifier}/raw/#{CGI.escape(params[:filepath])}?ref=#{CGI.escape(params[:ref])}"
     file_path = [domain, api_url, url].join
     file_path = [file_path, "access_token=#{@owner&.gitea_token}"].join("&") 
 
diff --git a/app/helpers/projects_helper.rb b/app/helpers/projects_helper.rb
index 7e511df93..ed5f67212 100644
--- a/app/helpers/projects_helper.rb
+++ b/app/helpers/projects_helper.rb
@@ -22,7 +22,7 @@ module ProjectsHelper
   end
 
   def render_download_file_url(owner, repository, filepath, ref)
-    [base_url, "/api/#{owner&.login}/#{repository.identifier}/raw/#{URI.escape(filepath)}?ref=#{URI.escape(ref)}"].join
+    [base_url, "/api/#{owner&.login}/#{repository.identifier}/raw/#{CGI.escape(filepath)}?ref=#{CGI.escape(ref)}"].join
   end
 
   def render_http_url(project)