CAS-1251: Possible Cross-Site Scripting on /login using execution parameter
CAS1251: Removed the json exception resolver bean config from the webapp. This handler primarily is responsible for handling ajax errors that may occur as part of the services management's D&D functionality. That change resides in the master branch and should be removed from 35x.
CAS-1253 Avoid duplicate joda-time dependencies.

Duplicate joda-time dependencies may arise in overlays that include cas-server-support-ldap. Declare direct depencency on joda-time for core and cas-server-support-ldap and exclude from transitive dependencies to ensure single consistent version.
(cherry picked from commit ce6d842cae893a6e9ae9aaef06e319a530c474ab)
NOTICE file changes required for maven-notice-plugin.
Ignore common IDE settings directories in licence header check.
[maven-release-plugin] prepare release v3.5.2
[maven-release-plugin] prepare for next development iteration
Merge remote-tracking branch 'upstream/3.5.x' into 3.5.x