[security] Self-XSS on database names (Operations/rename), see PMASA-2011-18