<%@ include file="/portal/include/include_java.jsp" %> <%@ include file="/contents/grid/content_mouseover_text.jsp" %> <%-- Ticket: 36995 --%> <%-- The value of the page attribute in the p:img was not being correctly evaluated, since output was being escaped, and there was also an XSS vulnerability since the URL wasn't being built using the asi:out tag. "Prebuilding" the URL and using the src attribute fixes the issue. --%>