While attempting to search for "&&" in the idea list, I encountered a query error. This suggests the potential presence of a SQL injection vulnerability in my eyes.
Better to open a case for Outsystems!