[Koha-bugs] [Bug 42904] Prevent XSS in patron restriction comments