* Note: Escape the /webmin/ message parameter, strip restart redirect HTML to plain text, and harden filter_javascript().