BATCHADM-136: Cross-site scripting is possible in the Job-parameters field

not a web guy, but from what i read in the free marker docs this should do it (and testing seems to be fine). wanted to use escape tags on header/footer but free marker throws unclosed tag exceptions..