theme config file can't be reached if theme_path doesn't begins with '/' in config.yml
rather trim()
Another XSS leak fixed.
Fixed: was html-encoding the wrong argument.

I, too, need more coffee.
Fixed: XSS in content edit title
Externalise some JS so it can be cached
Insert JS very late to better cope if jQuery has been pushed down
Merge pull request #1039 from rixbeck/master

theme config file can't be reached if theme_path doesn't begins with '/'...
Merge pull request #1051 from GawainLynch/feature/RateIt

[RateIt] JS cleanup/improvement