Fixed ETHREEOH-2888 "Incorrect system behavior on creating group with XSS in ASCII code and actions with it."

- Id is now decoded in the action links
- Added nodeName validator to webclient for groupids (and username) since that is what is used in share (means that "<" and ">" characters now are forbidden)

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@16958 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261

source/java/org/alfresco/web/ui/common/Utils.java

@@ -270,6 +270,10 @@ public final class Utils extends StringUtils
             buf.append(name);
             buf.append("'].value='");
             String val = params.get(name);
+            if(val != null)
+            {
+               val = Utils.encode(val);
+            }
             val = replace(val, "\\", "\\\\");   // encode escape character
             val = replace(val, "'", "\\'");     // encode single quote as we wrap string with that
             buf.append(val);