Fix bug #3879 Import broken for CSV using LOAD DATA
Importing CSV was also broken
Fix format specific options that were missing from ImportLdi plugin. Common code pulled out to AbstractImportCsv.class.php.
Security: avoid $GLOBALS overwrite
Security: sanitize parameter to fix a local file inclusion vulnerability
Minimize code duplication by pushing most of the common code to abstract parent class's setProperties() method
Merge branch 'QA_4_0' into QA_4_0-security
Translated using Weblate (Korean)

Currently translated at 59.8% (1531 of 2562)
Translated using Weblate (Portuguese (Brazil))

Currently translated at 100.0% (2562 of 2562)
Merge remote-tracking branch 'origin/QA_3_5' into QA_4_0
Merge remote-tracking branch 'origin/QA_4_0'
- port security commit (unsafe usage of preg_replace()) from the 3.5
  branch
- make the feature work (missing globalization of required $_POST params
Prevent null-byte injection in preg_replace()
Security: block another case of remote execution vulnerability
Translated using Weblate (Portuguese)

Currently translated at 53.1% (1361 of 2562)
Dropped unsafe usage of preg_replace

It could be tricked by apending /e\x00 to execute arbitrary php code.
The new code does simple string replace, we don't really need any of
regex stuff here.
Prevent null-byte injection in preg_replace()
Security: remove dots in template to avoid a remote code execution vulnerability
Security: block another case of remote execution vulnerability
ChangeLog entries for security fixes