Fix XSS in data-object-label
issue #1729: make vertical scrollbars in multi-select widgets always visible
Merge pull request #1724 from aceofspades/xss

Fix XSS in data-object-label
no reason to explicitly assign an id to a new object
Merge pull request #1736 from substantial/remove-new-object-id

no reason to explicitly assign an id to a new object
Merge branch 'master' into template-agnostic