(PUP-1576) Make hyphen in bare words legal (future parser)

This adds the ability to use a hyphen in a bare word. The result is the
same as if the bare word had been quoted in single quotes. It is not
allowed to start or end a bare word with a hyphen, those are always
interpreted as :MINUS.
(#20584) Add acceptance test for safer yaml handling in request body

This test uses the handling of report data as a proxy for all payload yaml
handling. It assumes that if we have safe yaml handling in one endpoint, that
the others will also be using the same code paths for deserialization and
therefore be patched correctly.
(#20584) Add acceptance test for safer yaml handling in query parameters

As in the previous commit this adds an acceptance test to make sure arbitrary
objects are not loaded from YAML. This tests input via query parameters, which
uses a different code path from YAML submitted in the body of a request.
Merge pull request #2393 from hlindberg/pup-1576_allow-hyphen-in-bare-words

(PUP-1576) Make hyphen in bare words legal (future parser)
Merge pull request #2396 from haus/maint/master/pup_208_merge_tests_up

(PUP-208) Merge acceptance tests from CVE-2013-3567 upstream
(maint) Fix typo in unicode escape in future lexer

The regular expression was missing a - between A and F
Merge branch 'master' of https://github.com/puppetlabs/puppet