encode client and request information shown to the user to avoid XSS, fix for issue #16