fix: [security] XSS in the user homepage favourite button
fix: [security] XSS in the user homepage favourite button

- navigating to a url in MISP with the URL containing a javascript payload would cause the execution of reflected xss
- automatically sanitised by modern browsers, but still confirmed via raw curl fetches

MISP/MISP,SteveClement/MISP,SteveClement/MISP,MISP/MISP,MISP/MISP,MISP/MISP,SteveClement/MISP,MISP/MISP,SteveClement/MISP,SteveClement/MISP