Queries: escape querystatus.fieldtext

Even though right now the API doesn't include any HTML code, it's a better practice to be defensive here.

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

scripts/js/queries.js

@@ -590,7 +590,7 @@ $(function () {
             " " +
             querystatus.colorClass +
             "' title='" +
-            querystatus.fieldtext +
+            utils.escapeHtml(querystatus.fieldtext) +
             "'></i>"
         );
       } else if (querystatus.colorClass !== false) {