This removes most references to Google, with some
remaining since they may point to things which are still
relevant. References to Google Code, Google Buzz and
Google Maps have been removed

Also move fancyurlfix into site-wide $config['fix']['fancyurls']

TODO: getByUri should make use of this directly I guess?

Evil forms on other websites could otherwise potentially be configured
to have action="https://gnusocial.example/api/statuses/update.json" or
whatever. XHR is already blocked with CORS stuff.

Really, why do browsers allow cross domain POSTs at all? Sigh. The web.

We say the email is private data, so reasonably we shouldn't reveal it
indirectly through a hash sum: http://xmlns.com/foaf/spec/#term_mbox_sha1sum

Also, the unselect rule for DELETE was useless anyway since it would
already have been filtered out by not having true.

(the => false stuff are for when you want ALL _except_ that)

Usage in config.php: $config['site']['sslproxy'] = true;

Add this to documentation...

The risk of injection attacks using HTTP is too great to allow a
site that allows both HTTP and HTTPS...

...why would something described as "Whether to hide silenced users from timelines"
be set to false by default? :)

...why would something described as "Whether to hide silenced users from timelines"
be set to false by default? :)