[java-sig-commits] [Bug 1738673] CVE-2019-10219 hibernate-validator: safeHTML validator allows XSS