POST FBR : Bodhi XSS vulnerability