Added
- New Mastodon-compatible APIs.
Fixed
- Close DNS rebinding window for outbound HTTP requests.
- Limit the size of HTTP bodies the server reads.
- Sanitize RSS feed output to prevent CDATA breakout.
- Destroy all sessions and access tokens on account termination.
Changed
- Ensure all GET and POST requests utilize
Ktistec::Network. - Process local recipients in-process in inbox/outbox activity processors.