Merge pull request #8326 from EverythingMe/xss-fix

[Bug 840442] fix all XSS vulnerabilities [r=crdlc](cherry picked from commit 749a9c74063bbbd86f7318bfdca1e9050e250a3e)

Conflicts:

	apps/homescreen/everything.me/modules/ShortcutsCustomize/ShortcutsCustomize.js