Merged #167 "Do not let new forks inadvertently disclose repository contents"
Create infrastructure for XSS sanitization
XSS sanitize standard page url parameters
Implement a SafeTextModel and use that for fields vulnerable to XSS
Enforce relaxed XSS filtering on markup documents
Apply the relaxed XSS filter to Markdown commit messages
Merge branch 'ticket/164' into develop