[VVP] Properly escape error messages in HTML output