To get better security the special pages should use HTMLForm especially the special pages for setting some value, that is editing the entity.
[X] NewItem, NewProperty - https://gerrit.wikimedia.org/r/235407 with ooui
[X] EntitiesWithoutLabel, EntitiesWithoutDescription - https://gerrit.wikimedia.org/r/235258
[X] GoToLinkedPage - https://gerrit.wikimedia.org/r/233898
[X] ItemByTitle - https://gerrit.wikimedia.org/r/235999 with ooui
[X] ItemDisambiguation - https://gerrit.wikimedia.org/r/235394
[X] ListProperties - https://gerrit.wikimedia.org/r/234732
[X] MergeItems - https://gerrit.wikimedia.org/r/236002 with ooui
[X] RedirectEntity - https://gerrit.wikimedia.org/r/234317 with ooui
[X] SetLabel, SetDescription, SetAliases, SetLabelDescriptionAliases, SetSiteLink - https://gerrit.wikimedia.org/r/233423