Bubka/2FAuth v5.4.1

on GitHub

Security release

• Fix XSS & SSRF vulnerabilities (thx to the XBOW team).
• Content Security Policy is now available and enable by default. CSP helps to prevent or minimize the risk of certain types of security threats.
  If CSP is already enable on your server, you can set the CONTENT_SECURITY_POLICY environment variable to false to disable it at 2FAuth level.