[xwiki-notifications] [jira@xwiki.org][Issue] (XCOMMONS-2828) $escapetool.html doesn't escape {, allowing XWiki syntax injection