Fixed error messages not being escaped in th:errors.