various modifications to prevent xss

- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81

public/stylesheets/application.css

@@ -473,6 +473,9 @@ float: right;
 font-size: 0.8em;
 }
 
+.contextual select {
+font-size: 1em;
+}
 
 
 /***** CSS FORM ******/