[HatoholMessageBox] Fix a HTML injection issue