Fixed issue #08740 and #08741: Stored XSS
Dev: add a viewHelper::purified($sHtml) function but can be done in each view
Dev: Why not use url_encode in LSYii_Validators/isUrl ?