What's new:
- Backport of #1526: Validate chargeBoxId for websocket connections with a regex. The chargeBoxId regex was also tightened to prevent some unwanted characters. If you want to go back to the previous, less restrictive, regex, you can override this behaviour with the newly introduced property/config
charge-box-id.validation.regex. You can set it to the old regex value which was\\S+. However, please only do so if the chargeBoxIds in your system are incompatible with the new regex. - Backport of #1533: Encode values properly when rendering HTML pages.
This is a security update. We urge all v3.6.0 users to update to this version.