Security fixes This release contains two medium severity security fixes: GHSA-x74j-jmf9-534w reports a bug where security headers for upload files were not set correctly. GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files. Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!

## Summary Maliciously crafted SVG files that were uploaded to HedgeDoc were able to execute JavaScript in the context of the instance's domain when being included into a note using `` t...

## Summary Due to a bug, files served below the `/uploads/` endpoint did not use a more strict security-policy. This resulted in a too open Content-Security-Policy and furthermore opened the po...