BZ-954229 : Security review: Stored and reflected XSS throughout