[ticket/12211] Do not run attachment file names twice through htmlspecialchars

Upload filenames are already processed via htmlspecialchars in the
type_cast_helper of the new request class. There is no need to run it through
htmlspecialchars() again in the filespec class.

Ticket: https://tracker.phpbb.com/browse/PHPBB3-12211

PHPBB3-12211