fix all CVEs in 1.2.6#2

ctcpip wants to merge 9 commits into1.2.6-branchjquery-lts/jquery-security-patches:1.2.6-branchfrom

1.2.7-secjquery-lts/jquery-security-patches:1.2.7-secCopy head branch name to clipboard