Bug 152688 - "doctor error message does not escape input" [p=reed r=mkanat]

webtools/doctor/templates/code-error.tmpl

@@ -42,7 +42,7 @@
       at <a href="mailto:[% config.ADMIN_EMAIL %]">[% config.ADMIN_EMAIL %]</a>.
     </p>
     
-    <p>[% message %]</p>
+    <p>[% message FILTER html %]</p>
   </body>
 
 </html>

webtools/doctor/templates/user-error.tmpl

@@ -38,7 +38,7 @@
       Doctor couldn't process your request because of the following problem:
     </p>
     
-    <p><big><b>[% message %]</b></big></p>
+    <p><big><b>[% message FILTER html %]</b></big></p>
     
       <p>
         The problem occurred when Doctor tried to execute the CVS command: