* Console:

- Fix several XSS issues (thx Aaron Portnoy of Exodus Intel)
  - Add Content-Security-Policy and X-XSS-Protection headers
  - Disable changing news feed URL from UI
  - Disable plugin install from UI
  - Disable setting unsigned update URL from UI
  - Disable /configadvanced
* DataHelper: Disallow \r in storeProps() (thx joernchen of Phenoelit)
* ExecNamingService: Disable (thx joernchen of Phenoelit)
* Startup: Add susimail.config to migrated files

core/java/src/net/i2p/client/naming/ExecNamingService.java

@@ -57,6 +57,8 @@ public class ExecNamingService extends DummyNamingService {
      */
     public ExecNamingService(I2PAppContext context) {
         super(context);
+        // disable for now
+        throw new UnsupportedOperationException();
     }
     
     @Override