Bug fixed ZK-2056: XSS Vulnerability in AuUploader
http://tracker.zkoss.org/browse/ZK-2056