LPS-38286 Fix JS error upon invoking event.preventDefault()
LPS-38286 Fix reflected XSS vulnerability