Files: Fix XSS when creating dropshadow

cc @karlitschek @LukasReschke