Fixing Bug #8184
    - Posting of html only allowed if &allowhtml=`1` and eform field type is html
    - Prevent XSS by executing htmlspecialchars during formMerge
Some typo and corrections in documentation.
Fixing Bug #8184
    - Prevent XSS by executing htmlspecialchars during formMerge in all form fields
Merge pull request #148 from Jako/master

Fixing Bug #8152