Merge pull request #2 from y-ken/master

add escape for configuration panel
add CGI.escapeHTML for record inspector