SECURITY: Fixed several XSS vulns reported by Secunia, mostly in Private Messaging. Also backported CSRF protection API from 1.1.x, and protected Private Messaging and logout functions.

// EN lang variables

tinyMCE.addToLang('visualchars',{
desc : 'Visual control characters on/off.'
});