extra/runner/report.py: HTML-escape user input
extra/runner/report.py: HTML-escape user input

Escape input entered by the user via the web interface to avoid XSS
attacks in case the server is run on a public or untrusted network.

User-entered data is only stored in files with the ".manual" extension.
You can still have your `classify` script enter html links in
`failure-reason` etc; changing those scripts requires access to the
server anyway, so they are considered trusted.

martynjarvis/stb-tester,martynjarvis/stb-tester,wmanley/stb-tester,stb-tester/stb-tester,stb-tester/stb-tester,wmanley/stb-tester,LewisHaley/stb-tester,LewisHaley/stb-tester,wmanley/stb-tester,LewisHaley/stb-tester,martynjarvis/stb-tester,martynjarvis/stb-tester,martynjarvis/stb-tester,LewisHaley/stb-tester,stb-tester/stb-tester,martynjarvis/stb-tester,wmanley/stb-tester,martynjarvis/stb-tester,wmanley/stb-tester,LewisHaley/stb-tester,LewisHaley/stb-tester,LewisHaley/stb-tester,stb-tester/stb-tester