escape html from username

modules/UI/videolayout/LocalVideo.js

 };
 
 LocalVideo.prototype.inputDisplayNameHandler = function (name) {
+    name = UIUtil.escapeHtml(name);
+
     NicknameHandler.setNickname(name);
 
     var localDisplayName = $('#localDisplayName');