LPS-34168

Hi Julio, it seems that the discussions tag doesn't use the subject parameter anymore, so I took it out. For the flags tag, it's escaped when sent through the message bus to create notifications. We could probably do the escaping a bit later in the message listener when assembling the html message. The social bookmarks tag only uses the title parameter for the twitter message, where it is in an attribute already escaped with escapeAttribute().