FIX: prevent iframe in expended quote
SECURITY: Don't allow redirects with periods in case you don't control
other tlds on the same domain.
Version bump to v1.0.4
Merge pull request #2 from discourse/stable

Stable