RT# 74666 - fixed vulnerability by escaping quotation_description var