Changelog (v7.4.15...v7.4.18)
- bug #65732 Restrict redirections to the current host when sessions are disabled (@nicolas-grekas)
- bug #65689 Use a lock for login throttling by default (@nicolas-grekas)
- bug #65655 Apply "signature_properties" when a remember-me token provider is used (@nicolas-grekas)
- bug #65678 Make the remember-me cookie follow the session cookie defaults (@nicolas-grekas)