HTML injection fix for bluetooth pairing, issue 65946

During bluetooth pairing, HTML injection is possible via the device name displayed to the user. This escapes the device name, before creating HTML from it, so it will preserve things like < and > but will not affect rendering of HTML

Bug: 12976386
Change-Id: I8a02d3be8c1a779dc9ed1c9ef8083a1159ab3f2b
Settings: ES translations

PS2: remove line numbers
PS3: cosmetic changes

Change-Id: Ibf0661a743eb0cbf82c90d898bc46c26aa448248
Merge "HTML injection fix for bluetooth pairing, issue 65946" into kk4.4
Merge remote-tracking branch 'slim/kk4.4' into w03