fix(security): Prevent XSS with warning messages (`addWarningMsg()`) (refs #4838)

Also:
- Prevent XSS with action done message (`addActionDone()`)
- Prevent XSS with error message (`exitError()`)
- Add `cleanhtmljs()` function in `freedom_util.php`