Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.