Fix insufficient output escaping bug in file attachment names (CVE-2020-13625).
{ "section": "core" }