gitweb: Fix usability of $prevent_xss