[webui] Do not render user input in ajax requests