getgrav/grav 1.7.53.7 on GitHub

[security] The security fixes below were found by Anthropic's OSS Scanner
[security] Image conversions now accept only supported image formats and keep cached files in their intended folder. Backport of the Grav 2.2.18 fix
[security] Responses that set cookies now stay private even when pages or plugins set their own cache headers. Backport of the Grav 2.2.18 fix
[security] Existing accounts are now counted correctly when the installation folder contains special characters. Backport of the Grav 2.2.18 fix
[security] Request URLs now respect the site's protocol forwarding setting. Backport of the Grav 2.2.18 fix
[security] A media .meta.yaml file can no longer change which file a medium points to or where it is served from, and only files ending in .meta.yaml are read as media metadata. Backport of the Grav 2.2.18 fix