Merge fix for #2288: do not quote + and @ characters when forming BaseRequest and HTTPRequest URL variables

Raise SyntaxError when encountering invalid PythonScript headers.

  See http://mail.zope.org/pipermail/zope/2007-February/170537.html

No commit message

was fixed in Zope 3.3 proper.

zope.tal.xmlparser.XMLParser.parseString()

o Forward-port from 2.8 branch.

o Forward-port from 2.8 branch.

        zope.security.management.checkPermission aren't rerouted to
        Zope 2's security policy.

        NOTE: If you already have a Zope 2.10 instance running, you
        will either have to recreate it or add the following lines to
        the end of the etc/site.zcml file::

          <securityPolicy
                component="Products.Five.security.FiveSecurityPolicy" />

-This line, and those below, will be ignored--

M    doc/CHANGES.txt
_M   lib/python/Products
M    lib/python/ZPublisher/Publish.py
M    skel/etc/site.zcml

That consisted of forwardporting r70918 and r71797 from the 2.9 branch and providing
a fix.

properly with the UnicodeEncodingConflictResolver configured through ZCML

No commit message