Fix potential XSS in error message

Signed-off-by: Kenji Suzuki <kenji.uui@gmail.com>