fix(core): WW-5623 HTML-encode form action in PostbackResult to prevent XSS#1653

Open

tranquac wants to merge 2 commits intoapache:mainfrom

tranquac:fix/postbackresult-xss

Commits on Apr 6, 2026

fix(core): HTML-encode form action in PostbackResult to prevent XSS
tranquac
committed

Commits on Apr 9, 2026

fix(core): WW-5623 use StringEscapeUtils and add regression tests
tranquac
committed