Added
- Set
X-Content-Type-Options
header.
Fixed
- Take into account possible spaces when handling forwarded emails (#4733)
- Do not stop fetching when encountering an email without Message-ID (#4740)
Changed
- Adjusted CSP meta tag.
- Set SameSite attribute to
lax
for session cookie. - Do not set
XSRF-TOKEN
cookie as it is not being used. - Added extra reply separators (#4629)