Index: openacs-4/packages/xowiki/tcl/form-field-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/form-field-procs.tcl,v
diff -u -N -r1.284.2.91 -r1.284.2.92
--- openacs-4/packages/xowiki/tcl/form-field-procs.tcl	20 Mar 2020 11:52:04 -0000	1.284.2.91
+++ openacs-4/packages/xowiki/tcl/form-field-procs.tcl	21 Mar 2020 12:37:02 -0000	1.284.2.92
@@ -1057,9 +1057,9 @@
     }
   }
 
-  FormField instproc render_disabled_as_div {class} {
+  FormField instproc render_disabled_as_div {CSSclass} {
     set attributes [:get_attributes id]
-    lappend attributes class $class
+    lappend attributes class $CSSclass
     ::html::div $attributes {
       if {[info exists :value_with_markup]} {
         ::html::t -disableOutputEscaping ${:value_with_markup}
@@ -1727,7 +1727,7 @@
         fn ${:value} {
 
           regsub -all {\\+} $fn {/} fn  ;# fix IE upload path
-          set fn [::file tail $fn]
+          set fn [::file tail ./$fn]    ;# prefix $fn to avoid potential tilde expansion
 
           set file_object [:store_file \
                                -file_name $fn \