Bugfix
- When a cache file can't be deleted, the cache purge job and
bin/grav clearnow name the file and the reason (such as "Permission denied") instead of "Unknown error", and carry on with the rest of the cache instead of stopping at the first one (#4384) - [security] The
svg_image()Twig function now escapes the classes it adds to the SVG. Thanks @manus-pi - [security] The
svg_image()Twig function only inlines real.svgfiles, so a theme that takes the image path from a page header can no longer be pointed at other files on the server