Additional parameters need to be checked for XSS

[mzeinstra]

We introduce a vulnerability for our users by not checking for XSS in our additional paramaters

InC-OW-EU relatedURL 
NoC-NC date 
NoC-CR relatedURL 
NoC-OKLR relatedURL

For those browser that lack good XSS protection (Think of old browsers that sometimes run within public institutions this can create a vulnerability.

Example:

http://rightsstatements.org/page/InC-OW-EU/1.0/?language=en&relatedURL=%22%3E%3Cscript%3Ewindow.location%20=%22http://www.google.com%22%3C/script%3E

I suggest we make a simple check for the right dataformat before we present it to the users.