URI Based Reflected XSS on XWIKI 4.5.2. Use the new escapetool.url method