SOC-4038 XSS vulnerability in Application's Display Name

Fix description:
* Escape the display name and the description of space application.
SOC-4239: [IE8]No user avatar in activity's comment.

Problem analysis:
- IE8 browser needs explicit position definition while other browsers don't require.

Fix description:
- Define the position of avatar in activity's comment.
SOC-4222: [User Popup] Incorrect Activity link when Platform runs inside an IFrame

Problem analysis
- The target window is currently wrong.

Fix description:
- Set the target to current window.
Crowdin injection w17 (from 20140419 to 20140423)
Merge branch 'stable/4.0.x' into feature/4.0.x-translation