Escape text on hidden content dividers.

ReviewBoard shows you a certain amount of context around the changes.
Above
this you're provided with two options...

  [+] 1005 lines
  [+] public void titlesModified(List<Title> titlesAdd, List<String>
      titlesDelete,

This is all fine and well, except in the case of content like that shown
above.  'Title' coincidently belongs to an html tag, and including it
breaks the html parser for the page (as it would with '</script>' and a
few other things). HTML escaping these lines to prevent this.

The main visible result is that diff hunks beyond the first fail to
load. In firebug you get the error of...

Uncaught ReferenceError: setFileAttachmentComments is not defined

Reviewed at http://reviews.reviewboard.org/r/4330/
Fixes bug #2612
Require Django Evolution 0.6.9 or higher.
Lock down the uploaded files a bit in default Apache configs.

The generated Apache configs now set some defaults that limit what can
be done in the uploaded directories. It prevents a .htaccess from
overriding settings, prevents other modules like php from executing, and
also sets some file types to appear as plaintext so that the browser
won't render them.

This is not a complete solution for protection against malicious files.
Older versions of IE don't care what mimetypes we use and will sniff for
HTML files, for instance. It's really up to the administrator to do some
heightened security precautions, which will be outlined in a KB article
separately.