Integrate a Javascript-filtering library for notes and comments

To combat Javascript injection vectors, the note and comments fields (those that are displayed without escaping) must be filtered server-side against unwanted tags.

To do this, integrate AntiSamy (http://www.owasp.org/index.php/Category:OWASP_AntiSamy_Project).

TODO:

• AntiSamy is not in the central maven repository yet, so it should be deployed in our Nexus (version 1.3),
• a listener has to be written that filters the configured field of any created or modified documents using AntiSamy,
• an appropriate configuration file for AntiSamy has to be chosen/written.