(cherry picked from commit d3ebb8a5)

[SECURITY-232] Integrating Remoting build with blacklist

[FIX SECURITY-247] Prevent loading of MethodClosure from XML

This reverts commit 48ef1542, reversing
changes made to dc4a9b1f.

[FIXED JENKINS-24696] Cannot assume that Jenkins.getInstance() != null when we are running a boot failure script.
(cherry picked from commit 42de07bb)

(cherry picked from commit 09722a98)

[FIX SECURITY-241] Compare API tokens in constant time

[FIX SECURITY-238] Don't echo command name

[FIX SECURITY-245] Compare crumbs in constant time

[FIXED JENKINS-24696] Cannot assume that Jenkins.getInstance() != null when we are running a boot failure script.
(cherry picked from commit 42de07bb)

(cherry picked from commit 09722a98)

(cherry picked from commit d8a13ac0)

(cherry picked from commit 758c0ced)

[JENKINS-31932] avoid synchronization for Jenkinsget/setJDKs
(cherry picked from commit 0a5b0368)

[FIXED JENKINS-31219] A CloudProvisioningListener can prevent provisioning of all clouds instead of just the targeted cloud

(cherry picked from commit cc932c49)

This change adds code to check that the user isn't attempting to rename
an existing node with the name of another existing node.  Previous to
this change, such rename operations would succeed and would corrupt node
configuration data.

(cherry picked from commit 16d6429c)