vanilla/vanilla — pull request #2356 by linc (2014-12-18 23:34:17+00:00)
Title: Security fixes to how discussions are posted and edited

* Closes CSRF vector in /post/discussion & /post/editdiscussion.
* Disallows changing the Format of a discussion when it shouldn't be.
* Disallow blank Format values; it is going to continue to be a security target otherwise.