MOB-2042 XSS protection

missing '@desc'