Dropped fix_IE_for_vary/attach.

This is a security fix. Disclosure following shortly.
Added additional checks in is_safe_url to account for flexible parsing.

This is a security fix. Disclosure following shortly.
Added release notes for 1.4.13, 1.5.8, 1.6.5.
typo: urlaprse -> urlparse
Merge pull request #2653 from collinanderson/patch-1

typo: urlaprse -> urlparse
Fix typo that disabled code example highlighting
Merge pull request #2654 from merwok/patch-1

Fix typo that disabled code example highlighting
Minor edits to latest release notes.
Fixed #17642 -- Added min_num support to modelformsets, inlines, and the admin.

Thanks Stephen Burrows for work on the patch as well.

Forwardport of 2914f66983a92fcae55673c517dd8d01e8c238c4 from stable/1.7.x
Fixed #20897 -- Added make_cursor() for consistent cursor creation

In django.db.backends.BaseDatabaseWrapper, pulled the creation of
cursors in the non-debug case into a separate method, in order to
make behavior more consistent when overriding the cursor creation
in derived classes.