Plone-app-theming

--------------------

Bug fixes:


- Fix unclosed file when reading manifest.cfg
[petschki] (199)
- Remove cyclic dependency with Products.CMFPlone
[sneridagh] (201)

--------------------

Breaking changes:


- Add bootstrap icon from resolver from Plone 6.
[petschki, agitator] (194)


Bug fixes:


- Avoid Server Side Request Forgery via lxml parser.
Taken over from `PloneHotfix20210518 <https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser>`_.
[maurits] (3274)

------------------

Bug fixes:


- For increased security, fail when trying file protocol access in diazo rules.
Also do not resolve entities, and remove processing instructions.
[maurits] (3209)

------------------

Bug fixes:


- Fixed WrongContainedType for hostnameBlackList on Zope 5.
See also `issue 183 <https://github.com/plone/plone.app.theming/issues/183>`_.
[maurits] (183)
- Fixed deprecation warning for ConfigParser.readfp.
[maurits] (3130)

------------------

Bug fixes:


- Fix a missing import [ale-rt] (188)

------------------

Bug fixes:


- Fixes 187: Invalid dependency on plone.app.caching
[jensens] (187)
- Cleanup: Remove meanwhile unused test fixture code refering to ``plone.app.caching``.
Removed class and fixtures: ``ThemingWithCaching``, ``THEMINGWITHCACHING_FIXTURE``, ``THEMINGWITHCACHING_TESTING``.
Those were nowhere used active in Plone nor outside in Github.
[jensens] (188)