XSS vulnerability in link syntax when using "path:". Add extraAttributes property in xwiki.properties