BZ-1049109: escaping task name html inputs