Bug fixed ZK-2056: XSS Vulnerability in AuUploader

http://tracker.zkoss.org/browse/ZK-2056