[picketlink-issues] [JBoss JIRA] (PLINK-773) [GSS](7.0.z) The fix for CVE-2017-2582 breaks the feature of attribute replacement with system property in picketlink.xml