[CVE-2010-0432] Merged from trunk r920369: Menu widget links of type hidden-form were not correctly encoding the value attribute.