LPS-41387

Hi,

I looked at our new Calendar portlet and fixed all XSS I was able to find.

I test almost everything, the only thing I don't know how to test are custom functions in scheduler.jsp: https://github.com/samuelkong/liferay-plugins/pull/56/files#diff-2b83091a552cb9232f6990772599605fL107 

@eduardolundgren, please can you look at it and check I didn't break it? Thanks! :)