various modifications to prevent xss

- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/views/projects/list_documents.rhtml

@@ -8,16 +8,6 @@
 
 <% documents = @documents.group_by {|d| d.category } %>
 <% documents.each do |category, docs| %>
-<h3><%= category.name %></h3>
-<ul>
-<% docs.each do |d| %>
-  <li>
-    <b><%= link_to d.title, :controller => 'documents', :action => 'show', :id => d %></b>
-    <br />
-    <%= truncate d.description, 250 %><br />
-    <em><%= format_time(d.created_on) %></em><br />&nbsp;
-  </li>		
-
-<% end %>
-</ul>
+    <h3><%= category.name %></h3>
+    <%= render :partial => 'documents/document', :collection => docs %>
 <% end %>