Today's update (83ca572) brings with it the following changes:
Security issues
- Fix cross-site scripting security issue in message system.
- Fix cross-site-scripting security issue in preview_content(r).
- Fix cross-site-scripting security issue in user profile related to user's name.
Bugfixes
- Because of a regression from a previous security fix, some teachers weren't
able to find their students when searching for them in the new_message(r)
contact manager form. This should now be rectified.