hotline #97784 : fix XSS on many js attributes

Merge request reports