[BUGFIX] Remove XSS intrusion from HTML export in backend module
[BUGFIX] Fix matching of filename against fileDenyPattern