Quick search:

fixes in 2.1.rc1

- the complete code of the abstact user interfaces has been reviewed and improved to protect against CSS
- the AJAX framework now limits requests to the host the page originates from,
- character sets are now specified explicitly (also necessary for compatibility with PHP 5.4)
- id's are included in string conversion
- string-conversion no longer propagates erroneous values.