WEB-5179 Fix for CVE-2014-2538