Audit Log should sanitize entries to prevent html injection

Current Situation

Most REST APIs store information in the audit log when called. When this information is displayed in the GUI, it can contain html code which will be interpreted.

While it is important to store the information to the audit log for further analysis, it should not be interpreted.

Desired Behavior

The API that accepts audit log information should sanitize the information provided to prevent HTML from being inrterpreted. Still it should be possible to display HTML tags for further analysis.