LPS-31883 XSS in Assets + asset publisher