Escaped the URLs and generated javascript in the url boxes

The url boxes on the project page and on the repository page are not escaped properly.

There are two problems with the escaping.

- javascript is generated by the view for the ZeroClipboard library. This is not escaped. Someone could inject code in the page.
- the urls are not uri encoded. This can cause problems a part of the url has some odd characters in it. (example: spaces)

This PR fixes this.