fix incorrect ^$ usage leading to XSS in sanitize_css
JDOM XXE Protection

Conflicts:
	activesupport/test/xml_mini/jdom_engine_test.rb

Conflicts:
	activesupport/test/xml_mini/jdom_engine_test.rb
fix protocol checking in sanitization [CVE-2013-1857]
Merge pull request #1 from SciMed/3-0-security

3.0.x security patches