Escaped some possibly insecure JSP code.

Partially resolves #117.