- eventsource.php: in case of potential CSRF attack we send an error message from the EventSource to the browser
- eventsource.js: handle undefined data on event
- update.js: in case of error we close the event source - advise the user to reload the page
- update.php: EventSource initialization is now done before we enter the maintenance mode in order to allow browser reload in case of possible CSRF attack
missing file
update.php: remove event type 'error' as it's unused
eventsource.js: fixing typos and JSDoc comment
Merge pull request #4014 from owncloud/fixing-4005-stable5

EventSource and update fixes