Browser: escape server response to prevent XSS.

Fixes #2139
Java subprocesses that we launch must be headless.

This is necessary for running tests on the build agents. This only
affects 1.9 because that runs against Java 6 where JMX insists on
starting up AWT even when it doesn't need a GUI.
Java subprocesses that we launch must be headless.

This is necessary for running tests on the build agents. This only
affects 1.9 because that runs against Java 6 where JMX insists on
starting up AWT even when it doesn't need a GUI.
Merge pull request #3023 from benbc/1.9-headless

Java subprocesses that we launch must be headless.
Java subprocesses that we launch must be headless.
Fix svg preserveAspectRatio attribute value.

* It's case sensitive in some browsers.
Merge remote-tracking branch 'upstream/1.9-maint' into 2.0-maint

Conflicts:
	community/lucene-index/src/test/java/org/neo4j/index/impl/lucene/TestRecovery.java
	enterprise/ha/src/test/java/org/neo4j/ha/TestPullUpdatesApplied.java
Merge pull request #3034 from davidegrohmann/merge-1.9-into-2.0

Merge 1.9 into 2.0
Merge remote-tracking branch 'upstream/2.0-maint' into 2.1-maint
Merge pull request #3035 from davidegrohmann/merge-2.0-into-2.1

Merge 2.0 into 2.1