Fix the state of the dashboard after refreshing.

The dashboard state was broken after its first load. The columns were no
longer interactive, nor was the Edit Column icon. The relative timestamp
columns showed absolute times.

We now set up the state again once we've completed a load.

Fixes bugs #2993 and #2994.
Fix an XSS vulnerability in the reviews dropdown.

The reviews dropdown had a bad vulnerability where it would assume the
user's full name is valid HTML. This allowed the user to craft a script
tag that would be executed every time the name appeared in the dropdown.

This vulnerability exists in 1.6.x, 1.7.x, and the in-development 1.8.
There are no known attacks in the wild.

This was reported by Craig Young at Tripwire.
Increase the max size of the timezone field.

The timezone field's max size was too small for the longest timezone
(America/Argentina/Buenos_Aires). The max size is now set to 30 to allow
for this.

Fixes bug #3005.
Reviewed at http://reviews.reviewboard.org/r/4230/
Fix an XSS vulnerability in the reviews dropdown.

The reviews dropdown had a bad vulnerability where it would assume the
user's full name is valid HTML. This allowed the user to craft a script
tag that would be executed every time the name appeared in the dropdown.

This vulnerability exists in 1.6.x, 1.7.x, and the in-development 1.8.
There are no known attacks in the wild.

This was reported by Craig Young at Tripwire.
Release Review Board 1.6.17.
Merge branch 'release-1.6.x' into release-1.7.x
Release Review Board 1.7.10.