UnivNautes

Avoid directory traversal when reading package xml files, also check if file exists before try to read it

Make sure variables are escaped, also replace exec calls to run rm by unlink_if_exists()

Remove useless code, variable is set again on next line

Escape parameters passed to shell_exec()

Be more careful with host parameter and make sure it's escaped when call shell functions

Validate starttime and stoptime format

Be more precise to match members of a bridge interface, it should fix #3637

Do not allow interface group name to be bigger than 15 chars, helps ticket #3208

Add some protection to parameters that come through _GET

remove openbgpd bits from system_gateways_edit and system.inc. The package
match is case-sensitive and hasn't matched the openbgpd package's name in
at least 5 years, so it doesn't do anything. It's far from functional in
any useful manner even fixing that issue.