Fixes a potential cross site scripting (XSS) issue

e.g. something like this should not be possible:
http://bibtexbrowser.sourceforge.net/bibtexbrowser.php?bib=%3Cscript%3Ealert%2842%29%3C/script%3E