libs/cbi: properly escape values in dynlist widget (#79)