2017/10/GHSA-q4qq-fm7q-cwp5 Multiple XSS Filter Bypasses in validator