Add escaping in a bunch of places

This does not solve everything, but it's a big step. Improving on this
will probably require fixing the confirm dialog.

Longer term steps:
 - Don't substitute values into JS. Move JS out of templates to help
   this not happen accidentally.
 - Move to a templating language that automatically does context-aware
   escaping. Because it's not the 1990s.
Merge pull request #174 from eve-val/fix-mask-import

Fix import error
Move the keymask classes to brave.core.util.eve.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
Merge pull request #175 from eve-val/escaping

Add escaping in a bunch of places
Merge pull request #177 from Acidity/feature/moveKeyMasks

Move the keymask classes to brave.core.util.eve.
Merge branch 'develop' into deploy

Conflicts:
	brave/core/key/model.py