- Enhanced sanitization and tag name normalization across compiler, runtime, and SVG handling, syncing core sanitization schema.
- Implemented SSRF mitigations and adjusted transfer cache behavior, preserving explicit credentials and cache modes for HTTP asset requests.
- Added upper bounds for digitsInfo in placeholders and refined i18n attribute security context lookup.