CC-4897: XSS exploit on library page