fix(XSS): Prevent XSS with warning messages (`addWarningMsg()`) (closes #4838)