Comment 15 for bug 1822630

I have tested Jeff Davis' latest commit and it resolves the issue for me. I independently made the same change before seeing that he had updated his branch.

I've added Jeff's commit with my signoff to my security branch: user/dyrcona/lp1822630-browse-xss.

I think this is ready to go. I haven't had any trouble with the other interfaces touched by the branch.

Thanks, Jeff!