[java-sig-commits] [Bug 1609624] New: CVE-2018-1999007 jenkins: HTTP 404 error pages do not escape URLs when Stapler framework used in debug mode , allowing for XSS