various modifications to prevent xss

- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/views/projects/export_issues_pdf.rfpdf

@@ -1,10 +1,9 @@
 <%	pdf=IfpdfHelper::IFPDF.new
 	pdf.AliasNbPages
 	pdf.footer_date = format_date(Date.today)
-	pdf.AddPage
 	@issues.each {|i| 
-		render :partial => 'issues/pdf', :locals => { :pdf => pdf, :issue => i }
 		pdf.AddPage
+		render :partial => 'issues/pdf', :locals => { :pdf => pdf, :issue => i }
 	}	
 %>