CVE-2020-36827: Incomplete Filtering of Special Elements

The XAO::Web module before 1.84 for Perl mishandles characters in JSON output during use of json-embed in Web::Action...