Protect (by &-converting) error message pages from xss attacking. Also
make rdfq.uri's render as sparql terms with suitable escaping.