fixes #970
fixes #971 GSNOFRAME = TRUE default
more log.php xss fixes