Added function for escaping query strings and fixed several XSRF vulnerabilities.
Disable loading external entities during XML parsing
Enhanced test
Emit notice if XXE can't be tested and skip test
Merged in csrf_fix (pull request #7)

Added function for escaping query strings and fixed several XSRF vulnerabilities.
Merged in libxml18 (pull request #8)

Disable loading external entities during XML parsing