* [#4146] Fixed SOAP timeout not being used for Stuf-ZDS client.
* [#4205] The CSP ``form-action`` directive now allows any ``https:`` target,
  to avoid errors on eHerkenning login redirects.
* [#4269] Fixed DMN integration for real-world decision definitions.