XSS title breaks friendly URL

• Type: Bug
• Status: Closed
• Resolution: No Longer Reproducible
• Affects Version/s: 7.1.10 DXP FP6, 7.1.X, Master
• Fix Version/s: None
• Component/s: Web Content > Web Content Administration
• Labels:
  • QA-AUTOMATION
• Story Points: 0.25
• Fix Priority: 3
• QA Test Name:
  • LocalFile.XSS#ViewWebContent
• QA Test Score: 5

Steps to Reproduce:

1. Go to Product Menu -> Content -> Web Content.
2. Click Add button.
3. Add a web content named <script>alert(123);</script>.
4. Publish the WC and edit it again.
5. Change nothing, Publish the WC.

Expected result:
WC can be Publish.

Actual result:
WC cannot be Publish, "Error:You must define a friendly URL for default language." shows, and friend url is Null.