Referer-in-okmessage reflective xss fix
Referer-in-logout reflective xss fix.
fix the behavior of masthead.js when passed an empty string as a item content (link target)
Merge.
Fixes for /dataset_collections API endpoint.
Guess this is not as utilized as the variant under /histories.
Merge next-stable into default.