fix use of tabs
protect catalog methods
add module security declarations
protect OFS.ObjectManager
fix test
fix test
sanitize url in isURLInPortal
check set own password permission in mailPassword. fix from PloneHotfix20130618
fix imports
prevent zope requests from being traversed
protect sendto method
sanitize input to spamProtect script
Merge security fixes from branch '4.3.x'