Stack trace is not HTML escaped in browser