FIX #3: CVE-2014-3926: XSS in <title> via "addr" parameter

This code is from 04adc9d3384f1efbb81f8f88a7d1d6871adf2e45
FIX #3: CVE-2014-3926: XSS in <title> via "addr" parameter

This code is from 04adc9d3384f1efbb81f8f88a7d1d6871adf2e45

(cherry picked from commit 12339bf968100df7d6f1cd5b8c0e45f52bab59cf)
Suggest config file location change outside web root

Closes #4: CVE-2014-3928: Unsafe configuration file path/ACL

(cherry picked from commit b7c8a7aed8fe46887238e09ffa3e394595f58a2c)
Suggest config file location change outside web root

Closes #5: CVE-2014-3929: Unsafe SSH keypairs path in default config

(cherry picked from commit 856cba2f9699f0796858cbaa3f7009ab482fc367)