BATCHADM-136: Cross-site scripting is possible in the Job-parameters field