bugfix on appdesk: the columns key of i18n was processed
bugfix on permission: listPermissionCategories should return an array
Tools_Url::encodePath(), prevent double encode
Merge branch 'rel/chiba2' of git://github.com/novius-os/core into rel/chiba2
Move wysiwygOptions method from twinnable behaviour to contextable behaviour
bugfix in get_diff of model with many_to_many relations
Merge branch 'rel/chiba2' of github.com:novius-os/core into rel/chiba2
Friendly slug regexp configurable
Add jquery dependency on jquery-validate
Merge branch 'rel/chiba2' of git://github.com/novius-os/core into rel/chiba2
removed get_diff (same as old model)
Merge branch 'rel/chiba2' of github.com:novius-os/core into rel/chiba2
Friendly slug : add some optional setup, no_accent, no_special, no_accent_and_special
Ajout de l'extension du fichier à uploader
Merge pull request #54 from romunovius/patch-2

Attachment : set() without the filename parameter, use the basename (filename + extension) of the file
Merge branch 'master/chiba' of git://github.com/novius-os/core into master/chiba
Merge branch 'master/chiba' of git://github.com/novius-os/core into master/chiba
Merge master/chiba
Attachment : save and delete methods return true if OK, false otherwise
Defense for Clickjacking attack

clickjacking is an attack which uses transparent layers on browsers.
Users see normal webpages, with invisible layers (inserted by attackers).
It appears that webpages are normal, users type into forms / click buttons, but actually users type into forms / click buttons on invisible layers. Attackers will get the data users have typed into invisible layers.

X-Frame-Options Header will defend clickjacking attack.
https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet

$response->set_header('X-FRAME-OPTIONS', 'SAMEORIGIN');