Merge commit '16f2c7af0122a4f3cfd709bd44d9b5402a6ec8bf' into security
Updating branch base to 1.532.
Merge branch 'security' into security-rc

Conflicts:
	core/src/main/java/hudson/markup/MyspacePolicy.java
Convert the queue's cancel shutdown to POST
Restored old appearance
Better way to handle link POST
Convert the management link to POST and allow other management links to require POST
Jelly Tag to submit POST os Async requests
Missing import.
Let netbeans.compile.on.save revert to its default.
Seems to work in 8.0 at least for some functional tests.
Developers can always disable it privately if they run into issues.
(cherry picked from commit 7b420175222458c4b5fbda247ef3c8a221bc6827)

Conflicts:
	pom.xml
[FIXED SECURITY-131] Recode restOfPath before constructing URLs from it, so it cannot be used for directory traversal.
Merge branch 'security' into security-rc

Conflicts:
	core/src/main/java/hudson/Functions.java
	pom.xml
Using proper @Issue annotation.
Do not redirectTestOutputToFile when we are running an individual test (suite or case).
In this case we are probably interested in looking at the output as it arrives in real time.
Can always be overridden on the command line if desired.
(cherry picked from commit 44a8ec110459e560a79c0f11883841bd7095f723)
[FIXED SECURITY-155] Do not allow plugin code to be downloaded via doDynamic, only static resources.
Merge branch 'security' into security-rc
comment
Merge branch 'rc' into security-rc
[FIXED SECURITY-143]

Coerce the parameter value to one of a legal value
[FIXED SECURITY-138]

Protect default password value from users who are triggering builds.
[FIXED SECURITY-149]

ZeroClipboard 1.3.5 is rather incompatible with 1.1.7, and various API changes were needed.

 - setText() call doesn't work until the DOM is populated, which is at some unknown time AFAICT.
   installing it via the datarequested event avoids this problem.
 - constructor now demands the element to attach to, and it's unclear if relative positioning is working or not.
 - "display: inline-block" is needed for ZeroClipboard to correctly compute the height of the element