[http] fix traceback page xss
bump, locale update