ECMS-5786 XSS with weblink