[seaf] fixed bug for 'xss' handle
[all_msg_list] msg form: fixed contact avatar ui bug
Remove avatar alt, and escape user nickname in notification list
Clean repo name when rename repo, escape nickname, desc before save and clean code
Revert escape nickname, desc, etc in user profile
[repo_create, 'details' view] escape some strings
Add an option to check share link traffic
[select2 bugfix] removed 'title' for selected item
[api2] Fix bug:group msg attachment more than 1
[api] refactor group_msg_to_json
[repo] 'details' view: fixed '1 click, 2 requst sent' bug
[api login] some android device's secure id is only 15 chars long
[api] fixed comment
[views] moved some functions from views/__init__.py to views/__ajax__.py
Remove signup_url from context processor
Require login when view file
[dir/file share] use ajax to get contacts
Fix a few bugs
Merge branch 'bugfix-lj' into 3.0
Merge branch 'share_improve' into 3.0