This version fixes a security bug which is not relevant to existing
Mahara installations since it has to do with auto_escape=on (which
is still off by default in Mahara).
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Signed-off-by: Jordi Boggiano <j.boggiano@seld.be>