[1.5.x] Fixed #22575 -- Fixed typo in docs/topics/class-based-views/generic-editing.txt.

Thanks adminq80 at gmail.com.

Backport of 87776859af from master
[1.5.x] Dropped fix_IE_for_vary/attach.

This is a security fix. Disclosure following shortly.
[1.5.x] Added additional checks in is_safe_url to account for flexible parsing.

This is a security fix. Disclosure following shortly.
Added release notes for 1.4.13, 1.5.8.
Bumped version numbers for release.
Bumped version number post release.
[1.5.x] Minor edits to latest release notes.

Backport of 860d31ac7a3bdd4b27db8b34b110b3d801ddaf8a from master
[1.5.x] Fixed #22167 -- Improved documentation on context processors

Backport of e7ffba8f78849fbf60b98fb8d67ef4577b585e3b from master.
[1.5.x] Fixed case in form widgets docs

Backport of 9494f29d from master
[1.5.x] Fixed #22644 -- Clarified documentation for NamedUrlWizardView

Backport of 727d048f0991ccbd1564c6fb225ffbfd2f1a2102 from master.
[1.5.x] Improved deprecation plan links in release notes.

Backport of 7ff326928a08d4c51141768bd305a44ca5ecb2e7 from master
[1.5.x] Fixed #22842

Backport of 7a1f8414c3b71b6af03e5be9f5f8db115551c410 from master.
[1.5.x] Fixed #22859 -- Improved crossDomain technique in CSRF example.

Thanks flisky for the report.

Backport of 0be4d64487 from master
[1.5.x] Fixed #22966 -- Clarified which release notes appear for each doc version.

Thanks haimunt at yahoo.com for the suggestion.

Backport of e6b3d6c22f from master
[1.5.x] Fixed #13794 -- Fixed to_field usage in BaseInlineFormSet.

Thanks sebastien at clarisys.fr for the report and gautier
for the patch.

Backport of 5e2c4a4bd1 from master
[1.5.x] Revert "Fixed #13794 -- Fixed to_field usage in BaseInlineFormSet."

This reverts commit 4ae68f677b3348765d8649d8b57beffa18fe8d3d.

stable/1.5.x branch is in security-fixes-only mode.
[1.5.x] Fixed #23149 -- Clarified note on HTTPOnly in cookie-based session docs

Backport of e26366da44bb343e7a95d01ff0dd18b8026c2802 from master.
[1.5.x] Fixed #23239 -- Clarified a phrase in the contrib.markup docs.
[1.5.x] Removed a doc reference to the deprecated `mimetype` kwarg.

Backport of 61ed959235 from master
[1.5.x] Noted that django-jython requires Django 1.7.

Backport of 72e98d5c16 from stable/1.6.x