Encode insert tags in the Input class
Fix a potential directory traversal vulnerability
Use Input::postUnsafeRaw() to hash and compare passwords
Do not use the translated labels in the exception message
Store the unfiltered SMTP password
Merge branch 'hotfix/security-fixes' into hotfix/3.2.16

Conflicts:
	system/docs/CHANGELOG.md