Backport from trunk r1302218: CVE-2012-1621: Escape errors returned from ajax calls in the checkout pages