various modifications to prevent xss

- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/views/my/page.rhtml

@@ -1,9 +1,9 @@
-<h2><%=l(:label_my_page)%></h2>
-
-<div class="topright">
-    <small><%= link_to l(:label_personalize_page), :action => 'page_layout' %></small>
+<div class="contextual">
+    <%= link_to l(:label_personalize_page), :action => 'page_layout' %>
 </div>
 
+<h2><%=l(:label_my_page)%></h2>
+
 <div id="list-top">
 	<% @blocks['top'].each do |b| %>
 	<div class="mypage-box">