Remove code that was supposed to go years ago in NodeUpdateManager
Make the code symlink-race proof
Introduce X-Content-Type-Options: nosniff where appropriate to avoid bad
surprises the REDFLAG warns about
indent
This is not security... but eclipse is right; this code-path will
trigger NPEs in any case
Merge remote-tracking branch 'nextgens/misc-sec-fixes' into next