fixed a few RCE vulnerabilities.
See:
https://github.com/opentechinstitute/luci-commotion-apps/commit/5021fb5d5881ccdacc96667e7d932995c2cb4c73
https://github.com/opentechinstitute/luci-commotion/commit/603eb2957f8e7916c0c98a254775e24e816c32dd
added XSS protection for submitted URLS
Merge pull request #4 from opentechinstitute/fix-RCE

Fix RCE and XSS vulnerabilities