+* (T236509) SECURITY: Fix HTML escaping in UserGroupMembership::getLink().
+* (T232932) SECURITY: User content can redirect the logout button to different
+ URL.
+* (T246602) SECURITY: jquery.makeCollapsible allows applying event handler to
+ any CSS selector.