fix another cross site scripting hole (CVE-2020-28727)
Authored by: Uwe Steinmann 2020-11-24
Parent: [877844]
Children: [5e8de4][e4be40]