Escape HTML exception message to avoid XSS threat