remove javascript urls and onclick handlers from xowiki menubar (yui and bootstrap) - add nonce attribute to javascript created via tdom - add HTML IDs to menu items - add ability to add listener (list with 2 elements: type (such as "click") and script (body of a function to be executed).
- add csrf protection (bulk-delete, save operations in FormPages) - add input checking for optional query-parameter "master" - bump version number to 5.9.1d8