Fixed bug where clicking on a category link would stomp on the "All Pages" listing.
Fixed a bug in the HTML5lib tokenizer (affects S5 slideshows). Some miscellaneous code cleanup. In particular, don't bother with zapping control characters; instead, rely on is_utf8? method to raise an exception (which we do anyway).
There was a XSS vulnerability in the handling of categories. Now they are escaped.