(cherry picked from commit d5167025)

(cherry picked from commit ad22f4dd)

(cherry picked from commit d3ebb8a5)

[SECURITY-232] Integrating Remoting build with blacklist

[FIX SECURITY-247] Prevent loading of MethodClosure from XML

This reverts commit 48ef1542, reversing
changes made to dc4a9b1f.

[FIXED JENKINS-24696] Cannot assume that Jenkins.getInstance() != null when we are running a boot failure script.
(cherry picked from commit 42de07bb)

(cherry picked from commit 09722a98)

[FIX SECURITY-241] Compare API tokens in constant time

[FIX SECURITY-238] Don't echo command name

[FIX SECURITY-245] Compare crumbs in constant time

[FIXED JENKINS-24696] Cannot assume that Jenkins.getInstance() != null when we are running a boot failure script.
(cherry picked from commit 42de07bb)

(cherry picked from commit 09722a98)

(cherry picked from commit d8a13ac0)

(cherry picked from commit 758c0ced)

[JENKINS-31932] avoid synchronization for Jenkinsget/setJDKs
(cherry picked from commit 0a5b0368)