XWiki 9151 : XSS vulnerability in link syntax when using "path:" 

This should also solve XWiki-8593 : XSS in images and links using on* parameter. See the xwiki-rendering corresponding pull request (https://github.com/xwiki/xwiki-rendering/pull/6).