BibDocFile: better JS washing in web UI

• Better clean values in File Management Interface, prior to using them as JavaScript strings.

• Escape document type and descriptions for HTML.

• Moved most JavaScript parameters out of 'onclick' attribute, in order to preserve double-quotes (instead of required transformation to ").

• Some issue still exists for filenames with line feeds (\n) or carriage returns (\r), as browsers will transform these values into \r\n, making it impossible to match the corresponding bibdoc. One would have to change the code to rely on some bibdoc ID instead of bibdocname to match bibdocs.

• Also escaped docnames in /files tab.

• Also prevent use of forbidden chars when renaming a file.

Tested-by: Tibor Simko <tibor.simko@cern.ch>