AUI-1666 XSS issue in AUI Diagram Builder