Bug fixed ZK-2056: XSS Vulnerability in AuUploader
http://tracker.zkoss.org/browse/ZK-2056
Merge remote-tracking branch 'upstream/6.5'