XML Parser Error when deleting directory which contains a file with an ampersand in its name, i.e. "file&stuff.png"

Filename should be escaped for HTML.

Patch against MOODLE_18_STABLE, files/index.php 1.111.2.6