Prevent possible XSS attack vectors
redmine 2.3 compatible with rails 3.2.12