Security Fixes
- Validate YouTube video id in Video embedding (0f5de69).
Thanks to @nrbxyz for reaching out and reporting this issue.
Bug Fixes
- Do not crash on line separators in embedding option keys (f5d1059).
- Block html entity bypass of the url filter in embeddings (3986670).
- Apply the dangerous style check to embedding styles (3af9836).
- Limit the number of includes per render (ac1230d).
- Do not show the repository path in datatable errors (c9e7978).
- Skip attachments that resolve outside the repository (d48236b).