Fixes a potential cross site scripting (XSS) issue

"Clean" version of issue #15 with a single commit.

E.g. something like this should not be possible:
http://bibtexbrowser.sourceforge.net/bibtexbrowser.php?bib=%3Cscript%3Ealert%2842%29%3C/script%3E