gitweb: add $prevent_xss option to prevent XSS by repository content