XWIKI-8592: XSS in the user profile.

* Fix.