4.0.2 release
escape query in error message
Merge branch 'MAINT_4_0_2-security' into QA_4_0
Changelog entry for Javascript execution vulnerability PMASA-2013-6