Security patch
Security patch

Encoding win.location during ExpressInstall to prevent cross-site scripting.

Signed-off-by: Philip Hutchison <3ba3974e96044dcde818e6310ed799abe10671d4@pipwerks.com>

swfobject/swfobject,swfobject/swfobject