HUE-2345 [beeswax] XSS filter bypass vulnerability