Skip filename suffix check for embedded images; return blocked.gif instead of HTML warning when embedded (#1489029)
Set minimal permissions to temp files (#148899)
Updated changelog