XSS vulnerability on the file name renderer

This module has an XSS vulnerability.

You can see this vulnerability by:
1. Enable Webform and Webform Multiple File Upload
2. Create a Node with node type Webform
3. Add a new Multifile type field
4. Disable file type validation from the UI
3. Upload file using that field with a file that includes XSS attack in the name of the file, for example: "><img src=1 onerror=alert(document.domain)>

The XSS vulnerability is in a 3rd party library and it has been fixed here https://github.com/fyneworks/multifile/pull/44.

Originally reported by lauriii