Fixes a couple of XSS vulnerabilities.
Update changelog.


git-svn-id: http://svn.cmsmadesimple.org/svn/cmsmadesimple@8767 3d254a34-79dc-0310-9e5f-be208747d8a0