Added function for escaping query strings and fixed several XSRF vulnerabilities.
Disable loading external entities during XML parsing
Enhanced test
Emit notice if XXE can't be tested and skip test
Preparing 1.8.17 release
Merged in csrf_fix (pull request #7)

Added function for escaping query strings and fixed several XSRF vulnerabilities.
Merged in libxml18 (pull request #8)

Disable loading external entities during XML parsing
Merge branch '1.8'

Conflicts:
	CHANGES.txt
	mod/members/pages/members/search.php
	version.php