Give Frederik Braun credit for the JSONField security report and fix.
Merge branch 'release-0.6.x' into release-0.7.x