Log messages XSS attack vector

Patch attached.

Oh and I used this update function to get rid of potentially malicious log messages in the DB:

/**
 * Delete long and potentially dangerous feeds log messages.
 */
function recruiter_job_import_update_7003() {
  db_delete('feeds_log')
    ->condition('message', '%<h3>Original item</h3>%', 'LIKE')
    ->execute();
}

Not sure if this is the right approach for Feeds, so I implemented this in a custom recruiter module for now.