Bug 1111862: HTML code injection in review history page