[security] XSS with malicious ENUM values

Signed-off-by: Marc Delisle <marc@infomarc.info>
4.1.14.5 release

Signed-off-by: Marc Delisle <marc@infomarc.info>