Added function for escaping query strings and fixed several XSRF vulnerabilities.
Refs #5323: More fancybox BC support
Refs #6136 - Adds test for elgg_http_url_is_identical
resolved the todo of using elgg_normalize_url in the
http_url_is_identical and also fixing the bug where url2 did not get
site_url prepended
Added more microformats to the profile page
invalidate the subtype_cache when removing a subtype
ElggSite->getURL() returns the site url instead if view/<guid>
as request by mrclay return a boolean
Disable loading external entities during XML parsing
Enhanced test
Emit notice if XXE can't be tested and skip test
fixes #3143 login part
Fixes #6167 - Make sure user has access to both river object and target
Fixes #6259: URLs no longer get unnecessary offset=0
Added URL fragment (#anchors) support to elgg_http_build_url
Added tests for elgg_http_add_url_query_elements
Code style fixes for recent PR
Makes sure all group pages respect the limited_groups setting
Merge pull request #6274 from juho-jaakkola/limited_groups

Makes sure all group pages respect the limited_groups setting
Fixed directions for going to the site secret generation page.