[security] XSS with malicious ENUM values

Signed-off-by: Marc Delisle <marc@infomarc.info>

Conflicts:
	libraries/Util.class.php
Bug 4544: additional fix for 4.2.x

Signed-off-by: Marc Delisle <marc@infomarc.info>
4.2.9.1 release

Signed-off-by: Marc Delisle <marc@infomarc.info>
Merge branch 'MAINT_4_2_9' into STABLE