ui-shared: prevent malicious filename from injecting headers
3 files changed