SECURITY: Fixed several XSS vulns reported by Secunia, mostly in Private Messaging. Also backported CSRF protection API from 1.1.x, and protected Private Messaging and logout functions.
// UK lang variablestinyMCE.addToLang('',{preview_desc : 'Preview'});