Stage 7 click-testing fixes

- aggregate: switch to shortcode syntax [aggregate ...]; fix paragraph
  wrapping by excising the shortcode and its surrounding <p> before
  sanitize, concatenating collection output outside sanitized content
- page.rb: remove aggregate XML unwrapping from rewrite_links_in_body
  (no longer needed with shortcode approach)
- rss builders: explicit CGI.escapeHTML on title/abstract; Builder 3.3.0
  does not escape when target buffer is html_safe (ActionView default)
- tinymce: disable menubar and promotion nag; add code plugin, remove
  paste plugin (built into TinyMCE 8 core); configure via admin_interface.js
  directly (config/tinymce.yml affects tinymce() helper only, not tinymce.init)

1 files changed, 3 insertions, 1 deletions

diff --git a/public/javascripts/admin_interface.js b/public/javascripts/admin_interface.js
index ca44891..f68fee8 100644
--- a/public/javascripts/admin_interface.js
+++ b/public/javascripts/admin_interface.js
@@ -16,7 +16,9 @@ $(document).ready(function () {
   tinymce.init({
     selector: 'textarea.with_editor',
     license_key: 'gpl',
-    plugins: 'paste',
+    promotion: false,
+    menubar: false,
+    plugins: 'code',
     toolbar: 'bold italic underline | bullist numlist | link unlink | blocks | code',
     extended_valid_elements: 'aggregate[tags|limit|order_by|order_direction|partial|conditions]',
     relative_urls: false,