Properly escape file names, titles, and descriptions

Hacker One report# 30019
Merge pull request #1270 from Mnkras/hotfix/hackerone-30019

Properly escape file names, titles, and descriptions