[ui messages, xss] Start migration towards use of _msgid instead of __message (prone to XSS injection) closes #1698245
<div id="ajaxroot">
<div class="ajaxHtmlHead">
<script src="http://foo.js" type="text/javascript"> </script>
<link rel="stylesheet" type="text/css" media="all" href="qunit.css" />
</div>
<h1>Hello</h1>
</div>