Fix for HTML tags being entered into addressbook fields, adapted from Philippe's
fix in DEVEL. This plus the previous commit to validate.php and global.php
*should* fix all the recent XXS exploits.
Also a fix for bug #599041