Add sequence support for upsert in DatabaseOracle

In the same way as in selectInsert

Bug: 53710
Change-Id: I26f891da808ecdc932e29eebda71df4c17a29617
(cherry picked from commit 3d0f393ced80206053e18f893a17fbb81be14c8d)
SECURITY: Make token comparison constant time

It seems like our token comparison would be vulnerable to timing
attacks. This will take constant time.

Bug: 61346
Change-Id: I2a9e89120f7092015495e638c6fa9f67adc9b84f
(cherry picked from commit 74ce391e9c115320e74c06772ee4fcb610ae33c4)
SECURITY: API: Don't find links in the middle of api.php links

Bug: 61362
Change-Id: Idf985e4e69c2f11778a8a90503914678441cb3fb
(cherry picked from commit 55cd620157d884af855459f1f7903b0427c992ce)
SECURITY: Disallow non-whitelisted namespaces

Disallow uploading non-whitelisted namespaces. Also disallow iframe
elements.

User will get an error including the namespace name if they use a non-
whitelisted namespace.

Bug: 60771
Change-Id: Id5c022543184b19b77ad32d9a8a0c2dbbc5e9038
Merge "SECURITY: Make token comparison constant time" into REL1_22
Merge "SECURITY: Disallow non-whitelisted namespaces" into REL1_22
Updated Release Notes and version number for 1.22.3

This is the MW1.22.3 maintenance release

Change-Id: I9f400338f7f450b097a13fd9932e2b2ec17b5ffb
Updated release notes

Release notes are now readable without the context of the according bugs

Change-Id: I21dc8c11de264cb461d78f5c09932290df1f5d80
Merge remote-tracking branch 'remotes/upstream/REL1_22' into update1223