[backport] Escape project.name in invitation page