sec: false positive — suppress SonarCloud XSS alerts in formALPHAprint.jsp and CaseManagementLinkTag.java (already encoded/setter-based)