Improper Neutralization of Text-Values in Object Version Preview

Text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticated users with access to the resources...