SAP Fiori Launchpad Cross Site Scripting