[FIXED JENKINS-21024] Catch a full range of XStreamException’s during deserialization, including rethrown exceptions from readResolve.
(cherry picked from commit c3508113f0e1659f0e6c1064f31cb2ac1caa2ef3)

Conflicts:
	changelog.html
	core/src/main/java/hudson/util/RobustReflectionConverter.java
[FIXED JENKINS-21183] Updated XStream to pick up NPE fix.

(cherry picked from commit 8011acf02828a3aaa666af1b1db873af1031a11a)

Conflicts:
	changelog.html
[FIXED JENKINS-21254] Ensuring that all <link>s offered on the /login page can be read even by anonymous users without Jenkins.READ.
(cherry picked from commit 7c91c402a7c491d51f776178898ee473989ab6c9)

Conflicts:
	changelog.html
[FIXED JENKINS-19826] element.setAttribute('name', …) does not work in IE in compatibility mode, so use prototype’s Element(…) which does.

(cherry picked from commit dda099c19a7a015d9c2fc655754dbb07b1b39455)

Conflicts:
	changelog.html