FIX Prevent SQLi when no URL filters are applied
Merge pull request #976 from ss23/SS2014004-3-0

FIX Prevent SQLi when no URL filters are applied
FIX Do now allow arbitary class creation in CMS
Merge pull request #978 from ss23/SS2014005-3-0

FIX Do now allow arbitary class creation in CMS
Merge remote-tracking branch 'origin/3.0' into 3.1

Conflicts:
	code/model/SiteTree.php
	tests/controller/CMSMainTest.php