No longer return attributes / methods from the class or from acquisition.
Thanks to Richard Mitchell at Netsight for the report.

because these tags get escaped since CVE-2010-1104 (see 2.13.12) got
fixed. (Merged r124165 from 2.13 branch here.)

Avoid conflicting signal registrations when run under mod_wsgi. Allows the use of `WSGIRestrictSignal Off` (LP #681853).

The locking here was only ever needed for the old `regex` module that was
originally used for this code, but that was replaced by the thread-safe `re`
some 10 years ago (see r20110, april 2001).

Use the cookie APIs or addHeader instead.