mozilla/kitsune — pull request #1711 by rlr (2013-11-05 20:40:24+00:00)
Title: [bug 923447] HTML escape uploaded image filename.

r?