- move adp templates from xowiki/www to xowiki/resources/templates- improve validity checking on tags (e.g. in path notation) to avoid potential pg errors on invalid UTF-8
- add csrf protection (bulk-delete, save operations in FormPages)- add input checking for optional query-parameter "master"- bump version number to 5.9.1d8
- hardening page contracts (invalid values for color_filter_value could cause postgres errors; example color_filter_value=1%00%c0%a7%c0%a2%252527%252522)