3.23.5

Changelog

• Security: Prevent an unexpected value type in Above the Fold/LCP processing when a pattern match fails
• Security: Encode the RocketCDN button URL before outputting it in inline JavaScript
• Security: Sanitize image srcset data collected by the beacon before storing it
• Security: Add strict format validation for Lazy Render Content location hashes
• Security: Harden validation of the per-user cache key