Add form "acceptCharset" to HTMLDOMPropertyConfig
Sanitize the string tag passed to DOM components

Because we're using innerHTML to generate DOM Elements, we need to make
sure that the tag is sane and doesn't try to do injection.

This wouldn't be an issue if we used document.createElement instead.
Sync upstream modules
JSXTransformer: don't look for docblock
Merge pull request #2320 from zpao/jsxtransformer-no-docblock

JSXTransformer: don't look for docblock
Merge pull request #2313 from sebmarkbage/sanitizetags

Sanitize the string tag passed to DOM components
Merge pull request #2139 from syranide/acceptcharset

Add form "acceptCharset" to HTMLDOMPropertyConfig
BSD + PATENTS
Merge pull request #2312 from zpao/license-update

Update Licenses
Ship merge to npm

People may have a bad time if they're depending on these but we can
delay that a little bit. Unless they're using directly and not
polyfilling Object.assign.