[BISERVER-12174] Code for MOBILE-458 created injection vulnerability in ...

...PUCLogin
Not sure this is safe either. Wouldn't you need an encoder?

ref: https://www.owasp.org/index.php/DOM_based_XSS_Prevention_Cheat_Sheet#SAFE_and_FUNCTIONALLY_CORRECT_example