cleanup_eval_fail should match all croak messages; was missing /m
fix XSS in version.cgi
unfinalize; document XSS fix
fix missing semicolon; check that HTTP_HOST is defined
Merge branch 'master' into debian
fix the hidden parameters not being included in the pkgindex template
Merge branch 'master' into debian