Backported from 6765ab04774eebf8ea0bd063566240b24ac28f15.

Bug 1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking contents of certain fields due to regex search
r=jfearn,a=dylan

After https://github.com/bugzilla/bugzilla/commit/7d0c10e71498f2909f466fc0ccda1890595bd3ff,
the <option> used when no flag is set is displayed as 'X' in Safari. This is because WebKit
displays the label when provided as per the latest HTML specification:
- https://html.spec.whatwg.org/multipage/rendering.html#the-select-element-2
- https://html.spec.whatwg.org/multipage/forms.html#concept-option-label

Chrome/Blink also display the label in standards mode, but not in quirks mode. The proposed
fix is to use a whitespace as label instead of 'X'. This renders as empty in Firefox / Chrome
and Safari and is still recognized as valid HTML as per https://validator.w3.org.

Docs about installing full perl dependents missing "."

r=dylan, a=dylan

Bug 1301383 - Memoize does not work under threaded perl in windows: "Anonymous function called in forbidden scalar context"

r=dkl

r/a=dylan

This commit fixes bug #1287265. 
https://bugzilla.mozilla.org/show_bug.cgi?id=1287265

r=dkl,a=dylan

r=dkl,a=dkl

* tvau-patch-1:
  Bug 1317777 - REST API 1.0 - datetime inputs cause server error

* 'patch-1' of https://github.com/tvau/bugzilla:
  Bug 1317777 - REST API 1.0 - datetime inputs cause server error

* DierickxD71-patch-1:
  Timetrack fields, "Orig Est."+"Hours Left", accept numbers with commas or point

Use datetime_format_inbound from Bugzilla::API::1_0::Util package.

For non-US locales the bug entry/update page shows values with commas as decimal seperator in the timetracking fields "Orig Est." and "Hours Left". However when saving/updating bugzilla refuses these values. (see bug 1122419)
These 2 changed lines let bugzilla accept/process these "comma-values" as "point-values".
This patch *should* not influence systems with US locale.