[security] Fixed case SEC-208: Addon domain conversion did not require a package for resellers. [security] Fixed case SEC-217: Self XSS…