On the add row and edit row forms, the save button is now temporarily disabled after being pressed (until the API call finishes). This is to prevent a user from accidentally clicking the button multiple times. Thanks to sinisaos for helping with this.
Added CSP (Content Security Policy) middleware to stop malicious SVG files from executing JavaScript. This was possible if:
* Local media storage was enabled * SVG uploads were allowed from untrusted sources * When viewing an uploaded SVG in Piccolo Admin, if you open the SVG in a new tab then it's possible for JavaScript embedded in the SVG file to run.
It's recommended that you upgrade to this version. Thanks to Skelmis for this.