Bug fixed ZK-2056: XSS Vulnerability in AuUploader
http://tracker.zkoss.org/browse/ZK-2056
Bug fixed B65-ZK-2105: EventQueue still sending request even it is removed by EventQueues.remove() API when using PollingServerPush
http://tracker.zkoss.org/browse/ZK-2105