Fix xss on useragent

As per https://github.com/ether/etherpad-lite/issues/2260