Prevent XSS attack via submission_history page.

Reviewed by @sarina and @brianhw offline.