Add XSS prevention

closes #3387
- added placeholder for <script> and <iframe>
- added google-caja sanitizer
- changed title in posts overview to ‚double-stash‘
Merge pull request #3405 from sebgie/issue#3387

Add XSS prevention