secure <metadata_raw>

currently, the raw metadata snippet is placed in the media file’s page in an
HTML commented <metadata_raw> tag. the concern is that the raw metadata may
contain a closing HTML comment tag. the function added in this patch handles
this situation.

Change-Id: I64d70d84d09130202f20123915e34d1b66e5cbcb