Security announcements

MSA-19-0003: User full name is not escaped in the un-linked userpix page