- Patch #83297 by yched et al: prevent double escaping of filenames in upload module.

  (Needs to be backported, I think)

modules/upload/upload.module

@@ -586,8 +586,8 @@ function theme_upload_attachments($files) {
   $rows = array();
   foreach ($files as $file) {
     if ($file->list) {
-      $href = check_url(($file->fid ? file_create_url($file->filepath) : url(file_create_filename($file->filename, file_create_path()))));
-      $text = check_plain($file->description ? $file->description : $file->filename);
+      $href = $file->fid ? file_create_url($file->filepath) : url(file_create_filename($file->filename, file_create_path()));
+      $text = $file->description ? $file->description : $file->filename;
       $rows[] = array(l($text, $href), format_size($file->filesize));
     }
   }