Merge branch 'security/4.4.9-releng' into 4.4.9-releng

Author: sunnavy

share/html/Elements/TSVExport

@@ -122,6 +122,8 @@ while (my $row = $Collection->Next) {
             $val =~ s/(?:\n|\r)+/ /g; $val =~ s{\t}{    }g;
             $val = $no_html->scrub($val);
             $val = HTML::Entities::decode_entities($val);
+            # To prevent injection, add a leading space to make sure excel-ish applications treat it like a literal
+            $val =~ s/^(?=-|\+|=|\@|")/ /;
             $val;
         } @$col)."\n");
     }