Chef manages a major bump for console

Then immediately plugs XSS hole

Chef has pushed out a brace of updates for its management console, one of which fixes a newly unearthed vulnerability in the product."