WICKET-5782 Missing escaping in MultiFileUploadField.js - sort of XSS

(cherry picked from commit 354e07129e587043d1eba32e08b0d82c4fc404e0)