prevent XSS attacks by encoding serverRoutePath which comes with the initial HTML
Merge branch 'xxs-fix'