Fix F55-ZK-314
B65-ZK-1720: XSS Vulnerability for fileupload
Merge branch 'master' of github.com:zkoss/zk
add comment
Merge branch 'Fix-F55-ZK-314' of git://github.com/huangnoah/zk
minor fine tune