cleanup xet test

test: xet upload from disk

cleanup: <img src=x onerror=alert(1)>.bin

cleanup: <svg onload=alert(1)>

test: large hostile (LFS)

test: small hostile

cleanup: forward slash (subdir)

cleanup: semicolon

cleanup: quote in name

cleanup: img payload

cleanup: svg payload prefixed

cleanup: svg payload bare

cleanup: both brackets

cleanup: gt only

cleanup: lt only

cleanup: ampersand

cleanup: space

test: forward slash (subdir)

test: semicolon

test: quote in name

test: img payload

test: svg payload prefixed

test: svg payload bare

test: both brackets

test: gt only

test: lt only

test: ampersand

test: space

test: control: plain

initial commit