4.1.3 (2021-12-10)
Bug Fixes
- security: disable reading config params from URL search params (#7697) (01a3e55), closes #4872, security advisory GHSA-qrmm-w75w-3wpx
Note: to re-enable the functionality of reading config params from URL, set new
queryConfigEnabled
core parameter totrue
. More info in documentation.