–Security: the filter's AJAX request can no longer ask for more than 128 products per page (it could make one request render the whole catalogue).
–Security: the result cache (PRO) stores only the filter's own requests and at most 500 results at a time, so junk parameters can no longer fill the database.
–Shared Rotozoom admin components updated (no direct access to their files).