Java script is executed when filtering for a user with "><img src=x onerror=alert(1)>” .

Steps to reproduce

1. Create an external share link

2. Navigate to your Atlassian profile or Click here

3. Add "><img src=x onerror=alert(1)> to your name field

4. Return to confluence and navigate to External Share Space settings (Side panel)

5. On creator field, look for your username

Similar issue occurred on Approval path for confluence - reported on Bug Crowd - APFC issue

Actual result

User will be prompt with java script error

Expected result

No java script is executed