Changelog (v8.1.5...v8.1.6)
- bug #65753 Combine trusted host patterns into a single regexp (@nicolas-grekas)
- bug #65743 Encode the path in the X-Accel-Redirect header (@Athorcis)
- bug #65729 Reject reserved characters in the cookie path and domain (@nicolas-grekas)
- bug #65741 Reject invalid paths (@nicolas-grekas)
- bug #65725 Fix parsing hosts and schemes in URLs (@nicolas-grekas)
- bug #65684 Do not unmarshall values that SodiumMarshaller cannot decrypt (@nicolas-grekas)
- bug #65683 Allow-list the values of the "X-Sendfile-Type" header (@nicolas-grekas)
- bug #65682 Ignore session ids that are not usable as file names in MockFileSessionStorage (@nicolas-grekas)