Fix an XSS vulnerability in the reviews dropdown.

The reviews dropdown had a bad vulnerability where it would assume the
user's full name is valid HTML. This allowed the user to craft a script
tag that would be executed every time the name appeared in the dropdown.

This vulnerability exists in 1.6.x, 1.7.x, and the in-development 1.8.
There are no known attacks in the wild.

This was reported by Craig Young at Tripwire.
Increase the max size of the timezone field.

The timezone field's max size was too small for the longest timezone
(America/Argentina/Buenos_Aires). The max size is now set to 30 to allow
for this.

Fixes bug #3005.
Reviewed at http://reviews.reviewboard.org/r/4230/
Fix an XSS vulnerability in the reviews dropdown.

The reviews dropdown had a bad vulnerability where it would assume the
user's full name is valid HTML. This allowed the user to craft a script
tag that would be executed every time the name appeared in the dropdown.

This vulnerability exists in 1.6.x, 1.7.x, and the in-development 1.8.
There are no known attacks in the wild.

This was reported by Craig Young at Tripwire.
Release Review Board 1.6.17.
Merge branch 'release-1.6.x' into release-1.7.x
Release Review Board 1.7.10.
Merge branch 'release-1.7.x'