3.3.7

Fixed

• Fixed a potential directory traversal vulnerability.
• Fixed a severe XSS vulnerability. In this context, the insert tag flags base64_encode and base64_decode have been removed.
• Handle nested insert tags in strip_insert_tags().
• Correctly store the model in Dbafs::addResource() (see #7440).
• Send the request token when toggling the visibility of an element (see #7406).
• Always apply the IE security fix in the Environment class (see #7453).
• Correctly handle archives being part of multiple RSS feeds (see #7398).
• Correctly handle 0 in utf8_convert_encoding() (see #7403).
• Send a 301 redirect to forward to the language root page (see #7420).