Issue #3603762 by longwave: HTML injection in ajax_page_state GET parameter

Dave Longrequested to merge
issue/drupal-3603762:3603762-ajax-page-state-html into main

Closes #3603762

Merge request reports