#122753 by Matt V.: xss possible via Label field.