I was asked by a different team how we can deal with bots

So they are not competent enough to do it on their own, but your solution gets laughed at? Why help them at all?

Let them allocate the budget for a “big boy” brand application firewall like F5 of paloalto…

Fix track titles and external urls not being escaped

I’m not a coder, but how can a bug like this survive up to the version 12.1 of any project?