Escape `data.x_forwarded_for` value before inserting it into the DOM
mg.request_info.request_uri
scriptname