[java-sig-commits] [Bug 1937445] CVE-2020-13959 velocity: XSS in the default error page for VelocityView