Also encode > and '
Add CSRF check on login and logout
This is a minor issue and not worth a backport in my opinion as it could break more things than it's worth having it.
Cleanup code a little bit

- Use OCP\Response constants instead of the HTTP error code
- Use checkAppEnabled() instead of OC_App::isEnabled with an if statement
- Remove uneeded variable $baseURL
- Rename $isvalid to $isValid
Add missing \
Check if ReflectionMethod::getDocComment is working
adopt new settings style
 Redirect to index if the logout link is accessed without valid session

This is needed to prevent "Token expired" messages while login if a session is expired
@see https://github.com/owncloud/core/pull/8443#issuecomment-42425583
Merge branch 'master' into csrf-on-login-and-logout

Conflicts:
	core/templates/login.php
Merge branch 'master' into cleanup-list-code

Conflicts:
	apps/files_sharing/ajax/list.php
Merge branch 'master' into test_annotations_working

Conflicts:
	lib/private/util.php
adding annotation check to checkServer()
Fixed drag and drop from external files, added tests

- Fixed detection whether the drop zone is inside the currently visible
  table
- Now dragging outside the table does nothing instead of uploading,
  because the user might drop on the sidebar
- Added unit tests for the drop handler
Fix dropping files below the table
Fixed undefined object error that appears after a delay

Now binding properly with the file list instance object.
Allow apps to control via a hook to skip adding/removing a file during filescan
Rename variable to something more appropriate.
Allow the default behavior to come from the config.
Use 'filesystem_check_enable' as a config option.
Prevent apps from affecting the scanner via hook.
Add unit tests for escapeHTML