XWIKI-10015: html escape form action url
Merge remote-tracking branch 'origin/stable-5.4.x' into stable-5.4.x