HQL injection in getdocuments.vm with sort parameter

In getdocument.vm ; the ordering of the returned documents is defined from an unsanitized request parameter (request.sort) and can allow any user to inject HQL ; see https://github.com/xwiki/xwiki-platform/blob/029c324dc3eeac1401210b420460bdfb970346e7/xwiki-platform-core/xwiki-platform-web/src/main/webapp/templates/getdocuments.vm#L75