emergency HTML/JS injection fix.
sanitation of status display input was missing everywhere.
Merge pull request #6195 from Walter0o/injection_fix

emergency HTML/JS injection fix.