Added function for escaping query strings and fixed several XSRF vulnerabilities.
Refs #6136 - Adds test for elgg_http_url_is_identical
resolved the todo of using elgg_normalize_url in the
http_url_is_identical and also fixing the bug where url2 did not get
site_url prepended
Disable loading external entities during XML parsing
Enhanced test
Emit notice if XXE can't be tested and skip test
fixes #3143 login part
Fixes #6259: URLs no longer get unnecessary offset=0
Added URL fragment (#anchors) support to elgg_http_build_url
Added tests for elgg_http_add_url_query_elements
Code style fixes for recent PR
Makes sure all group pages respect the limited_groups setting
Merge pull request #6274 from juho-jaakkola/limited_groups

Makes sure all group pages respect the limited_groups setting
Fixed directions for going to the site secret generation page.
Allow body attributes
Remove CR
Fix rendering
Use builtin elgg_format_attributes
Merge pull request #6251 from jeabakker/3143-memcache-entity-cache-on-login

fixes #3143 login part
Merge pull request #6270 from Srokap/pr/6264

Fixes #6259: URLs no longer get unnecessary offset=0