https: used and revised git command
https: used
Need <b> and <br> after cleaning and https used
xssClean the displayed file/folder name

Using html filter
Strip ../ so we don't have dir traversal vuln
strClean now replaces javascript:

htmlentities doesn't cover : and str_replace on : is too vague
regex is case insensitive
https used and drop IGG crowdfund link