[Bug 582211] escape html in request diff page