Fix js injection vulnerability on certificate edit page and applicant show page.