erp5_web_renderjs_ui: Ensure that came_from is html quoted before redirect

See merge request !1889
7 jobs for master
in 0 seconds, using 0 compute credits, and was queued for 0 seconds