fix (13838) : prevent account stealing by way of a javascript function

Arnaud Paugetrequested to merge
cherry-pick-7cd05e79 into Support/2.5.X

(cherry picked from commit 7cd05e79)

Merge request reports