fix escaping of /f/ file URLs
don't execute SVG javascript
this should be textContent
I don't think these are exploitable, but better to be safe
small fixes to mediacrush embedding
update CHANGELOG
Release 4chan X v1.7.31.