MDL-41820 XSS in the quiz responses report.

Thanks to Michael Hess for finding this bug and reporting it to us.
MDL-41941 clean message text
MDL-41807 repository_filesystem: Prevent access to parent directories