escaped output values on approval page, closes mitreid-connect#1111

Author: jricher

openid-connect-server-webapp/src/main/webapp/WEB-INF/views/approve.jsp

@@ -148,11 +148,11 @@
 <i class="icon-info-sign"></i> <spring:message code="approve.warning"/>:
 </h4>
 <spring:message code="approve.no_redirect_uri"/>
-<spring:message code="approve.redirect_uri" arguments="${redirect_uri}"/>
+<spring:message code="approve.redirect_uri" arguments="${ fn:escapeXml(redirect_uri) }"/>
 </div>
 </c:when>
 <c:otherwise>
- <spring:message code="approve.redirect_uri" arguments="${redirect_uri}" />
+ <spring:message code="approve.redirect_uri" arguments="${ fn:escapeXml(redirect_uri) }" />
 </c:otherwise>
 </c:choose>
 </div>