15.3.6 (2026-06-11) Bug Fixes block unsafe pointer set tokens (a786bc6) harden safe URL resolver (dea50b0)