gitweb: Consolidate escaping/validation of query string