Ignore user ID post data. Merges [25316] to 3.6.

Built from https://develop.svn.wordpress.org/branches/3.6@25321


git-svn-id: http://core.svn.wordpress.org/branches/3.6@25283 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Tighten allowed upload file types. Merges [25317] to 3.6.

Built from https://develop.svn.wordpress.org/branches/3.6@25322


git-svn-id: http://core.svn.wordpress.org/branches/3.6@25284 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Validate referrers to prevent off-domain redirects. Merges [25318] to 3.6.

Built from https://develop.svn.wordpress.org/branches/3.6@25323


git-svn-id: http://core.svn.wordpress.org/branches/3.6@25285 1a063a9b-81f0-0310-95a4-ce76da25c4cd