LPS-39477 XSS in file name