fix: prevent HTML input in the form field "name" for order templates and wishlists

[andreassteinmann]

PR Type

[x] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no API changes)
[ ] Build-related changes
[ ] CI-related changes
[ ] Documentation content changes
[ ] Application / infrastructure changes
[ ] Other:

What Is the Current Behavior?

If a user inserts the following code
><img src onerror=alert(document.cookie)>
as the name of an order template or a wishlist in the according dialog and saves it, the code is executed:

Steps to reproduce:

1. login in B2C or B2B storefrent
2. navigate to a PDP
3. click on "Add to wishlist" in B2C or "Add to order template" in B2B
4. insert the code ><img src onerror=alert(document.cookie)> as the name of the wishlist / order template
5. click save
6. the alert is shown

Issue Number: Closes 83582

What Is the New Behavior?

The fix adds a form validation which prevents the two special characters "<" and ">" to avoid the usage of HTML tags like
><img src onerror=alert(document.cookie)>

Now, an error message is shown if the user inserts "<" or ">".

The fix is applied at two places:

• name of an order template (PDP and My Account)
• name of a wishlist (PDP and My Account)

Does this PR Introduce a Breaking Change?

[ ] Yes
[x] No

AB#84372

[github-actions]

Azure Demo Servers are available:

• Universal B2B
• Universal B2C

[marschmidt89]

Added translations.