Fix directory traversal vulnerability on LocalUploadBackend
Fixed IE popup dialog.
Fixed IE8 crash when unescaped quotes are in inserted .innerHTML