remove env and repo on studio

[deedee]

For studio will not add entry Environment and Code Repo on project_info. For MM: html related related currently comment out, although will still create entry on project_info

[ajefts]

@deedee @skyhit The general functionality looks ok for this. However, it's letting me inject scripts into the form fields. For example, I can add "'><svg/onload=alert(1)> to the env url, which will then run on the page. Can we protect it like we do for project name/desc/etc?

[skyhit]

@deedee @ajefts yes, we can use the same approach to convert as project name and description

[deedee]

Agree. Or we can create servlet filter to sanitize input? In term of this kind of attack, many places need to be sanitized which not did right now.