#7931 Tool install dialog needs to escape html/js
If you go to install a tool and enter "/><img src=x onerror=prompt(/XSS-test/)> as the "Url Path" it will execute that JS when previewing the URL. We should escape this. Not a security risk since it only executes local to the current user (not a way to make a "victim" run this JS)
Fixed as part of [#7919]
Related
Tickets:
#7919