[hibernate-issues] [JIRA] (HV-1012) XSS vulnerability not caught by SafeHtml