[security] XSS with malicious ENUM values

Signed-off-by: Marc Delisle <marc@infomarc.info>
4.0.10.4 release

Signed-off-by: Marc Delisle <marc@infomarc.info>