Added function for escaping query strings and fixed several XSRF vulnerabilities.
Refs #5323: More fancybox BC support
Refs #6136 - Adds test for elgg_http_url_is_identical
resolved the todo of using elgg_normalize_url in the
http_url_is_identical and also fixing the bug where url2 did not get
site_url prepended
Added more microformats to the profile page
invalidate the subtype_cache when removing a subtype
ElggSite->getURL() returns the site url instead if view/<guid>
remove thumbnails if no longer needed
as request by mrclay return a boolean
Updated the basic CRUD features to treat discussion replies as entities.
Added an upgrade feature that migrates discussion replies from annotations to entities.
Ajaxified the discussion reply edit form.
Added notifications about replies to discussion topics.
Disable loading external entities during XML parsing
Enhanced test
Emit notice if XXE can't be tested and skip test
Allow regenerating site secret
PRNG replace Drupal's with George Argyros'
code style
Refs #5985 - Corrects admin message link to upgrade page.