What's Changed
- Improve escaping of embedded link URLs by @pfefferle in #3599
- Content-negotiate by Accept quality, not JSON-only by @pfefferle in #3601
- Improve permission checks for admin actions by @pfefferle in #3609
- Improve validation of incoming federated activities by @pfefferle in #3610
- Fix lookups for activities received from other WordPress sites by @pfefferle in #3612
- Fix remote profile lookups and tighten checks on boosted content by @pfefferle in #3613
Full Changelog: 9.2.0...9.2.1