XWiki-9366 : XSS via FileUpload. No restriction on files posted by user with PR