Remove 'safe' function from template to prevent xss (Bug #1091764)

Change-Id: I829550345babb944e7215a712ed61136c7b5cad8
Signed-off-by: Melissa Draper <melissa@catalyst.net.nz>
internalmedia/lib.php: Changing flowplayer invocation to only use relative URLs

Change-Id: Iae96e62951e2e9504f4b4988fa59e7ce1f1d1368
Signed-off-by: Aaron Wells <aaronw@catalyst.net.nz>
flowplayer: Updating flowplayer with custom build to disallow absolute URLs in config parameters

Also updating to the latest version of flowplayer, and removing all the flowplayer source code
files from the Mahara repo and instead referencing the separate github repo they can be DL'ed from.
(The only 3 files actually used by flowplayer are flowplayer.swf, flowplayer.controls.swf, and the
flowplayer.js file. The rest are only necessary if you want to compile.)

The flowplayer GPL license requires that if we modify the source code and redistribute it,
we must change the name to something not confusing with flowplayer. See "ADDITIONAL TERM per
GPL Section 7", paragraphs 3 & 4.

License files that don't apply to our distribution were also removed.

Change-Id: I400266f7cfb0e560f6afcede65e10f4db626a43a
Signed-off-by: Aaron Wells <aaronw@catalyst.net.nz>
Version bump for 1.5.8

Signed-off-by: Melissa Draper <melissa@catalyst.net.nz>
Version bump for 1.5.9testing

Signed-off-by: Melissa Draper <melissa@catalyst.net.nz>