[FIXED SECURITY-67] Forbid CSS links in markup to be on the safe side.
[SECURITY-63] Require POST for running Groovy scripts.
[SECURITY-63] Check RUN_SCRIPTS for /eval.
[FIXED SECURITY-69] Require POST to redeploy artifacts.
[FIXED SECURITY-71]
Merge remote-tracking branches 'origin/SECURITY-63', 'origin/SECURITY-67', 'origin/SECURITY-69' and 'origin/SECURITY-71' into stable
Timestamps have expired in these test data
(cherry picked from commit 9858bf1e08c5ac2a2401714c82533d78ef3642a9)
Merge branch 'stable' of ssh://git.cloudbees.com/jenkinsci-cert/jenkins-security into stable
[maven-release-plugin] prepare release jenkins-1.509.1
[maven-release-plugin] prepare for next development iteration
updated changelog as a part of the release