remove bogus escapeshellcmd(), fixes #3124

Closes #3124

Merge request studip/studip!2106

public/sendfile.php

@@ -54,7 +54,7 @@ PluginEngine::loadPlugins();
 // Set Base URL, otherwise links will fail on SENDFILE_LINK_MODE = rewrite
 URLHelper::setBaseURL($GLOBALS['ABSOLUTE_URI_STUDIP']);
 
-$file_id = escapeshellcmd(basename(Request::get('file_id')));
+$file_id = basename(Request::get('file_id'));
 $type = Request::int('type');
 if ($type < 0 || $type > 7) {
     $type = 0;