GHSA-3MQV-8GXG-PFM4 TwitterServer Cross-site Scripting via /histograms endpoint

server/handler/HistogramQueryHandler.scala in Twitter TwitterServer aka twitter-server before 20.12.0, in some configurations, allows XSS via the /histograms endpoint...