* prep-release-3.0.13: (242 commits)
[prep-release-3.0.13] Bump version numbers for 3.0.13 release
[prep-release-3.0.13] Highlight security relevant changes
[develop-olympus] Add changelog for 3.0.13 release.
[develop-olympus] Bump version numbers for 3.0.13-RC1 release.
[develop-olympus] Bumping version numbers to final for 3.0.13 releases.
[ticket/13531] Send 404 Not Found.
[ticket/13531] Explicitly disallow trailing paths (e.g. PATH_INFO).
[ticket/13527] Apply htmlspecialchars() to data from version server.
[ticket/13527] Remove two unused variables.
[ticket/13526] Correctly validate the ucp_pm_options form key.
[ticket/13523] Install PHPUnit manually instead of from PEAR.
[ticket/13519] Correctly validate imagick path as path and not string
[ticket/11613] Allow cookies to work on netbios domains
[ticket/13376] Revert unnecessary change for cookies called GLOBALS 92f554e3
[ticket/10442] Adds <dd> </dd> to <dl> for xhtml correctness
[ticket/13341] Change coverage to whitelist to prevent errors with temp files.
[ticket/13331] Use docs target for this branch, add docs-all for dev branches.
[ticket/13324] Update sami/sami and fabpot/goutte for new zipball location.
[ticket/13234] Fix conditions and CS
[ticket/13234] Never allow autologin/remember me to modify the userid
...
[ticket/13527] Escape information received from version server
* bantu/ticket/13527:
[ticket/13527] Apply htmlspecialchars() to data from version server.
[ticket/13527] Remove two unused variables.
[ticket/13519] Correctly validate imagick path as path and not string
* marc1706/ticket/13519:
[ticket/13519] Correctly validate imagick path as path and not string
b4f95deefc suggests that this can lead to issues
with classes having the same name. However, this does not seem to be a problem
with the current version of PHPUnit we are using.
Despite https://phpunit.de/manual/4.1/en/code-coverage-analysis.html saying
that addUncoveredFilesFromWhitelist="true" is optional, this seems to be on by
default in PHPUnit 4.1.0. As a result, all files are considered for code
coverage; which is what we want.
processUncoveredFilesFromWhitelist is however false (by default) and as such
even files that are considered for code coverage are not processed through PHP
when not used in actual tests. Since it is already impossible to test multiple
classes with the same name in the same test run (without process isolation),
because that would already lead to "cannot redeclare class" errors, it is also
impossible for "cannot redeclare class" errors to happen in test coverage.
PHPBB3-13341
[ticket/13324] Update sami/sami and fabpot/goutte for new zipball location
* bantu/ticket/13324:
[ticket/13324] Update sami/sami and fabpot/goutte for new zipball location.
