www: Escape HTML entities in the List Elements menu

This commit adds HTML escaping to strings displayed in rightmenu.js.
Previously, malicious binary could incorporate Javascript code in one of its
strings and attack the web interface.