Mitigated some possible XSS weaknesses in index.php (by using more secure headers and cookies), and in
render.inc. When creating forms, the current path was not being sanitized sufficiently, which has now been
corrected.