Corrected HTML title injection in lfamily() (closes #3713)

Also:
- Corrected HTML title injection in fdlGetAccounts()
Corrected HTML title injection in EDITMAIL (refs #3713)
Corrected HTML title injection in EDITMAIL doc preview (refs #3713)
Added htmlescape() function in common.js (refs #3713)

It's the JS equivalent of PHP's htmlspecialchars().
Corrected HTML title injection in RNAVIGATE (refs #3713)
Corrected HTML title injection in FREEDOM_IFLD (refs #3713)
Corrected HTML title injection in FOLDER_BARMENU (refs #3713)
Corrected HTML title injection in viewdoc/mini-vue (refs #3713)
Merge pull request #721 from eguaj/3.2-A3713

3.2 a3713