Security update

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002

No other fixes are included.

Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036

Changes since 7.x-3.13:

Fixes Instagram Block - Moderately Critical - Information Disclosure - SA-CONTRIB-2016-037

After an Instagram API update, all users who had previously authenticated their block using the built in authentication were no longer able to display images. #2724233: Block completly broken after instagram update.

fixes Instagram Block - Moderately Critical - Information Disclosure - SA-CONTRIB-2016-037

After an Instagram API update, all users who had previously authenticated their block using the built in authentication were no longer able to display images. #2724233: Block completly broken after instagram update.

- See SA-CONTRIB-2016-032.
- #2494951 by labboy0276, deanflory: Added entity base table property.
- #2378665 by pirog: Fixed issue with long SIDs.
- Added basic simpletest.
- Fixed issue where content isn't rendered correctly.

Fixes Outline Designer - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-035