Properly escape list of messages when creating a new entry

This has been broken since day 1... oops.

Noted by Vik Fearing

Author: mhagander

pgcommitfest/commitfest/static/commitfest/js/commitfest.js

@@ -20,7 +20,7 @@ function findLatestThreads() {
          sel = $('#attachThreadList');
          sel.find('option').remove();
          $.each(data, function(m,i) {
-            sel.append('<option value="' + i.msgid + '">' + i.from + ': ' + i.subj + ' (' + i.date + ')</option>');
+             sel.append($('<option/>').text(i.from + ': ' + i.subj + ' (' + i.date + ')').val(i.msgid));
          });
    }).always(function() {
       $('#attachThreadListWrap').removeClass('loading');