Add https to update URLs and replace RELENG_8_3 by RELENG_10_0
Respect g['tmp_path']
Fix #2952, escape necessary chars to avoid xss injection