v4.6.3

Security

• Added placeholder URL for site.uri.public in configuration to guard against Host Header Injection attacks by default in production.

IMPORTANT : As of 4.6.3, site.uri.public must be explicitly set in your production configuration to avoid security issues. If not set, some links and emails will not work properly. See Going Live for more info.

What's Changed

• Placeholder for site.uri.public in production by @Silic0nS0ldier in #1187
• Release 4.6.3 by @lcharette in #1188

Full Changelog: v4.6.2...v4.6.3