This is a security release.
- Parser: removes all control characters from template [Closes #279]
- PhpWriter::removeCommentsPass() replaces comment with space to prevent unwanted result
- isNext() a isPrev() called with SIGNIFICANT
- linter: warn on BOM and deprecated stuff
- linter: Add shebang so it can be run directly (#277)
