In short
sanitize-html 2.18.1 fixes a stack overflow that nested
<iframe> tags caused in WeKan's import and export sanitizer, and a failed
import or export no longer disables the account of whoever ran it unless it
was an attempt. The forked Meteor dynamic-import and meteor shell keys
come from the crypto RNG.
Thanks to above GitHub users for their contributions.
