[BUGFIX] Add missing htmlspecialchars() or quoteJSvalue()

Change-Id: I6c088a2e5b9f870bacc7d4e425d56698baad19fb
Resolves: #63321
Releases: master, 6.2
Reviewed-on: http://review.typo3.org/34740
Reviewed-by: Markus Klein <klein.t3@reelworx.at>
Tested-by: Markus Klein <klein.t3@reelworx.at>