Added '&' escaping to report message display view.

For some reason the obvious solution "item.message | escape | ..." did not work and the escape filter escaped everything that was being appended with the later filters, which resulted in mangled report message. (Redmine issue: #3443)

lib/hawat/blueprints/reports/templates/reports/show.html

@@ -121,7 +121,7 @@
                         <div role="tabpanel" class="tab-pane fade in active" id="tab-report-message">
                             <br>
                             <samp>
-                                {{ item.message | replace("<", "&lt;") | replace(">", "&gt;") | replace("\n", "<br/>\n") | replace(' ', '&nbsp;') | replace("\t", '&nbsp;&nbsp;&nbsp;&nbsp;') | safe }}
+                                {{ item.message | replace("&", "&amp;") | replace("<", "&lt;") | replace(">", "&gt;") | replace("\n", "<br/>\n") | replace(' ', '&nbsp;') | replace("\t", '&nbsp;&nbsp;&nbsp;&nbsp;') | safe }}
                             </samp>
                         </div>