Fixed XSS vulnerability on rating action

Security report from our customer reported a XSS vulnerability in the rating product.

Very simple to be reproduced: just add `.../++UserRating++/rate?value=<script>alert(%22Gotcha%22)</script>` after the rating URL.