Added function for escaping query strings and fixed several XSRF vulnerabilities.
Disable loading external entities during XML parsing
Enhanced test
Emit notice if XXE can't be tested and skip test
Allow body attributes
Remove CR
Fix rendering
Use builtin elgg_format_attributes
Added a Hello world plugin tutorial
Merge pull request #6292 from juho-jaakkola/tutorials

Added a Hello world plugin tutorial
Preparing 1.8.17 release
Merged in csrf_fix (pull request #7)

Added function for escaping query strings and fixed several XSRF vulnerabilities.
Merged in libxml18 (pull request #8)

Disable loading external entities during XML parsing
Merge branch '1.8'

Conflicts:
	CHANGES.txt
	mod/members/pages/members/search.php
	version.php
Corrections to XXE test
Merge pull request #6281 from hellekin/body_vars

Allow setting BODY attributes in page/default view
Fixes #4391, Split group edit form into seperate parts
Merge pull request #6139 from jeabakker/4391-split-group-edit-form

Split the group edit form into seperate parts for extendability