webplatform / fxa-content-server

* Mistakenly removed XSS forbiding iframing, reverted
* Enforcing to reply postMessage ONLY if part of an accepted origin

See: http://docs.webplatform.org/wiki/WPD:Projects/SSO/Improvements_roadmap#Recovering_session_data

Squashed commit with latest addition as a single patch.

Last squash 2014-05-22 at 12:00 EST

Basics:
* This commit is meant to have "surgical" patches on top of upstream
* Currently a rebase from oauth branch

Branding:
* Adjusting README
* Use ou rown fxa-content-server-i10n
* Overriding signup marketing ad specific to Firefox/Mozilla

Account pre-existence validation form events:
* Improved extension without overwriting events hash map
* Add our own sign_up validation event handlers
* Check for existing user and add notice on the form
* Follows convention to setCustomError on form field when username is invalid
* Setting in place webservice call service
* Including shell script to check user details through PHP in scripts/getuserinfo.sh
* New fields: username, fullName are supported
* Hijack in bower.json, specify our own version AND build of fxa-js-client at tag 0.1.20-wpd

fix(config): set default oauth url to dev deployment

OAuth Sign in and Sign up flows

…oauth scripts

fix(test): Removed 'npm run test-browser'. Combined into 'npm test'

lgtm, thanks @vladikoff!

…ercent in error

…abled

Issue 1129 install

Thanks for tracking this down @vladikoff! r+

…ontrib-imagemin

show the git sha recorded in app/bower_components/fxa-content-server-l10n/.bower.json

…l10n/.bower.json

fix(client): update js-client so xhr works in IE

fix(client): Fix form validation on browsers that do not have HTML5 form...

Fix browse happy text and the firefox logo on IE8, disable IE9 support.

fix(marketing): add breakpoints for marketing snippet

….scss

fix(server): `utf8` is not a valid content-type, `utf-8` is.

fix(email): properly escape smart quotes

This looks good! Thanks @zaach!