Bug 14423: XSS bug in lateorders