FileBrowserOperation security fixes

- filtered directory parameter
- upload on own directory
- UI: button text doesn't repeat folder name
Rename params operationName to operationId