Security Fixes
- Prevent clean_html bypass via comments and CDATA (1a934ad).
- Sandbox attachment responses and force download of active content (16d5dbf).
- Generate SECRET_KEY with a secure random source in the docker entrypoints (7d99d41).
Thanks to @redhotchilihacker1 for responsibly disclosing these issues and
bringing them to our attention.