security: fix XSS in repo strip view.

rhodecode/apps/repository/views/repo_strip.py

@@ -70,8 +70,8 b' class StripView(RepoAppView):'
                     data[i] = {'rev': None, 'commit': h.escape(rp[chset])}
                 else:
                     data[i] = {'rev': data[i].raw_id, 'branch': data[i].branch,
-                               'author': data[i].author,
-                               'comment': data[i].message}
+                               'author': h.escape(data[i].author),
+                               'comment': h.escape(data[i].message)}
             else:
                 break
         return data