Fix XSS in select2 formatter

Tested in IE8.

OpenProject Issue: https://www.openproject.org/issues/1011 (login-only)