Interim measure: Escape fullnames as well.

I'm sure this problem exists in a latent way with stream names and
email addresses as well. Once I figure out a general way to fix this,
I'd like to go back and handle these three cases in a cleaner,
symmetric way, but this'll do for now.

(imported from commit a634e6ac39ea337be499889b3ff64b3c4f4fcccb)

zephyr/static/js/ui.js

@@ -123,7 +123,7 @@ function update_autocomplete() {
     });
 
     var huddle_typeahead_list = $.map(people_list, function (person) {
-        return person.full_name + " <" + person.email + ">";
+        return Handlebars.Utils.escapeExpression(person.full_name) + " <" + person.email + ">";
     });
 
     // We need to muck with the internal state of Typeahead in order to update