Security announcements

MSA-14-0045: XSS file upload possible through web service