fix XSS in bugdisplay.html.php
code format