correct select2 url
Merge branch 'refs/heads/master' into sanitize-ajax
better sanitisation