Fix cross-site scripting vulnerability in generation of citation text.