GRAILS-11322 add HTML escaping to remoteField and remoteLink tags
GRAILS-11317 wrap remoteFunction, remoteLink and remoteField with raw by default so that they can be used with function call syntax in GSP expressions
GRAILS-11324: disable DTD loading by default in internal Grails XML parsing (IOUtils.createParserFactory)
ignore DTD files in TLD and web.xml parsing
Merge branch '2.3.x'