Starting with WebGUI 7.7.14, WebGUI now has protection against Cross-Site Request Forgeries.  There were many fixes related to the Thingy, rendering the add/edit field dialog, changing the thank you screen that is displayed when a ThingRecord is purchased and fixing a bug with showing which fields are selected.  Snippets are now allowed to be empty without triggering the Not Found Page.  When the Collaboration System creates a synopsis of a post, it will no longer cut off international characters.  There was an upgrade bug that was fixed having to do with the old RSS Asset being removed in the 7.7.2 upgrade.  The missing icon for the new Map asset was added.

Changelog:

 - fixed #10606: shelf selector
 - fixed: Have just 1 list of protected groups.  Use that everywhere.
 - fixed #10488: Map.gif is missing for Map wobject
 - fixed #10553: WebGUI vulnerable to CSRF attacks
 - fixed #10607: snippets empty
 - fixed #10601: Edit field in Thing: no submit button
 - fixed #10560: 7.7.2 upgrade script leaves rssFromParent assets behind (Wes Morgan)
 - fixed #10612: strange i18n, with regard to label
 - fixed #9935: German characters in Collaboration System
 - fixed #10610: editing a page and editing goes away
 - fixed #10518: ThingyRecord edit page - Fields to Edit not filled in
 - fixed #10603: ThingyRecord Thank You/Confirmation Screen Confusing
 - fixed #10615: i18n Asset_StoryArchive - deleteIcon
 - fixed: Exceptions from WebGUI::Exception::Shop
 - fixed #10616: karma list will break eventually