Fixed issue #09300: XSS protection or variable substitution breaks links with variable substitutions
Dev: adding some manual : http://manual.limesurvey.org/Expression_Manager#XSS_security
Dev: some EM method still can not be used