phpbb/phpbb — pull request #2293 by marc1706 (2014-04-11 19:11:55+00:00)
Title: [ticket/12211] Do not run attachment file names twice through htmlspecialchars

Upload filenames are already processed via htmlspecialchars in the
type_cast_helper of the new request class. There is no need to run it through
htmlspecialchars() again in the filespec class.

Ticket: https://tracker.phpbb.com/browse/PHPBB3-12211

PHPBB3-12211