fix(security): sanitize remote IP headers and escape log viewer output

#4135

web/html/component/aCustomStatistic.html

@@ -38,7 +38,7 @@
         required: false
       }
     },
-    template: `{{template "component/customStatistic"}}`,
+    template: `{{template "component/customStatistic" .}}`,
   });
 </script>
 {{end}}