4.2.8 release

Signed-off-by: Marc Delisle <marc@infomarc.info>
bug #4530 [security] DOM based XSS that results to a CSRF that creates a ROOT account in certain conditions

Signed-off-by: Marc Delisle <marc@infomarc.info>
Merge commit '01c553a'
Fix merge conflicts

Signed-off-by: Marc Delisle <marc@infomarc.info>