Security Improved

Fix XSS Filename
Fix XSS Mime type that sent from client