Renamed Controls to Actions
Applied pun_htmlspecialchars to $value['filename'] and $value['name'].