[Bug 1167974] VUL-0: viewvc: CVS lastlog filename not escaped (XSS)