security: shellwords escape attachment file names to prevent remote code injection

Merge peristent temp files and fix quotation of shellwords escaped string

s|returnded|returned|
security: prevent remote command injection in content_type
security: link to wiki page on view-attachments
Merge notes from  0.13.2.1, release notes from 0.14.1.1

Conflicts:
	lib/sup/version.rb

Conflicts:
	CONTRIBUTORS
	History.txt
	ReleaseNotes

Conflicts:
	History.txt
	ReleaseNotes
Bump to version 0.14.1.1