When checking bug #4959, some other bugs has been detected :
- switching language on publication was broken
- URL of images into WYSIWYG editor were not correct
bug #4719 :  Fix some XSS flaws. The aim is to encode for HTML inputs coming from a user at rendering time
bug #4719 :  Remove the filtering of javascript code in the WYSIWYG
fixing lost of translations on spaces and components relative to bug #4959
Merge branch 'ney-bug4959' into core-5.12.x