What's Changed
- Add path traversal protection to FileStateSessionBackend by @richard-to in #1361
- Remove ai package and related fine-tuning infrastructure by @richard-to in #1362
- fix: compare full origin (scheme+host+port) in is_same_site by @richard-to in #1363
- fix: add Origin check to WebSocket handler to prevent CSWSH by @richard-to in #1364
Full Changelog: v1.2.2...v1.2.3