fix possible XSS in full_message and messageloader
Merge git://github.com/Graylog2/graylog2-web-interface into develop