[SECURITY] XSS in TCA type inline