Escape user controlled text in error page

Prevent xss when req.url contains " or < characters

Bug: 70008
Change-Id: I521194ce2d1549b6d2d51d1299d15b2a3850c08e