Fix a XSS vulnerability with bad input to json_dumps.

Django's JSON serialization does not handle escaping of any characters
to make them safe for injecting into HTML. This allows an attacker who
can provide part of a JSON-serializable object to craft a string that
can break out of a <script> tag and create its own, injecting a custom
script.

To fix this, we escape '<', '>', and '&' characters in the resulting
string, preventing a </script> from executing.
Fix a XSS vulnerability in the gravatar template tag.

The generated gravatar HTML wasn't handling escaping of the display name
of the user, allowing an attacker to choose a name that would close out
the <img> tag and inject a <script> tag.

Django 1.4 does not include format_html(), so instead, we just call
escape() on every value going into the HTML.
Fix running the webapi unit tests on Python 2.5.
Release Djblets 0.7.30.
Update the 0.7.30 release notes with the CVEs.
Allow resources to specify the name to use for links.

WebAPIResource subclasses can now set the link_name attribute to the
desired name for any links from other resources. Previously, this was
hard-coded to name_plural, and it still defaults to that.

This makes it easier to change a resource's name without affecting the
link, or to just choose a nicer name for links.

Reviewed at https://reviews.reviewboard.org/r/6125/
Add a function to get raw base64 content on Base64Fields.

Base64Field now provides a get_<fieldname>_base64() function that will
return the actual Base64 content, rather than the decoded content.

Reviewed at https://reviews.reviewboard.org/r/6209/
Backport splitting all release notes into ReST files.

On release-0.8.x, we moved from the NEWS file to individual ReST files
for the release notes. This backports this change to release-0.7.x.
Require Django 1.4.14 or higher.

Django released a new security update today, which fixes 4 significant
security bugs. We now require this release at a minimum.
Add release notes for Djblets 0.7.31.

This covers all the changes made since 0.7.30.

Reviewed at https://reviews.reviewboard.org/r/6251/
Release Djblets 0.7.31.
Bump to 0.7.32 dev.
Enhance extensibility of the siteconfig settings template.

The siteconfig settings template has some new blocks that allow for
better overriding of content, especially when used through the
configure_extension.html template.

The page title can now be changed without overriding the entire title
tag. There's a block for the particular page's subtitle, separate from
the page-wide title block.

The buttons box at the bottom of the page can be replaced or augmented
as well. The Save button can be replaced, and pages can add additional
buttons wherever they wish.

Reviewed at https://reviews.reviewboard.org/r/6581/