MC-5835: [Sec] XSS in Page Builder

Move category argument to addCategoryConditionToProductsBlock to its own data entity

Author: danmooney2

app/code/Magento/PageBuilder/Test/Mftf/Data/CommonContentTypeData.xml

@@ -121,4 +121,8 @@
         <data key="fieldName">message</data>
         <data key="value">Magento1111111 Page11111111111</data>
     </entity>
+    <!-- XSS Payload -->
+    <entity name="PageBuilderXSSPayloadProperty" type="pagebuilder_xss_payload">
+        <data key="value">&gt;&lt;img src=x onerror=throw(1)&gt;</data>
+    </entity>
 </entities>

app/code/Magento/PageBuilder/Test/Mftf/Test/AdminPageBuilderProductsTest.xml

@@ -1394,7 +1394,7 @@
         </actionGroup>
         <actionGroup ref="addCategoryConditionToProductsBlock" stepKey="addCategory">
             <argument name="page" value="ProductsContentTypeForm"/>
-            <argument name="category" value="&gt;&lt;img src=x onerror=throw(1)&gt;"/>
+            <argument name="category" value="{{PageBuilderXSSPayloadProperty.value}}"/>
         </actionGroup>
         <actionGroup ref="saveEditPanelSettings" stepKey="saveEditPanelSettings"/>
         <!-- Validate Stage -->