Security update

hook_query_alter_tag() fix.
#2025441: Search error

SA-CONTRIB-2013-072 - Node View Permissions - Access Bypass

7.x-2.2:
- Fix: typo on admin message if library not yet uploaded
- Fix: use safe_value to avoid XSS issue

See SA-CONTRIB-2013-057 - TinyBox - Cross Site Scripting (XSS).

See also SA-CONTRIB-2013-054

Resolve a condition where use of a certain URL would allow for access bypass.

See also SA-CONTRIB-2013-054

Resolve a condition where use of a certain URL would allow for access bypass.

Resolve a condition where a specially crafted username could bypass Login Security's validation. - SA-CONTRIB-2013-053 - Login Security - Multiple Vulnerabilities

Removes the option for login delay, because it could lead to a denial of service.

Resolve a condition where a specially crafted username could bypass Login Security's validation. SA-CONTRIB-2013-053 - Login Security - Multiple Vulnerabilities

Removes the option for login delay, because it could lead to a denial of service.