fix XSS vulnerability in ExceptionReport