Fix XSS hole exposed through ad hoc report title