s3 swat: Fix possible XSS attack (bug #8289)