Send a 301 redirect to forward to the language root page (see #7420)
Correctly handle 0 in utf8_convert_encoding() (see #7403)
Correctly handle archives being part of multiple RSS feeds (see #7398)
Remove the tooltip of the delete icon of the meta wizard (see #7270)
Always apply the IE security fix in the Environment class

Apply the IE security fix to both Environment::get('queryString') and Environment::get('requestUri') and use Environment::get('queryString') instead of $_SERVER['QUERY_STRING'].
Merge pull request #7453 from contao/feature/ie-security-fix
Send the request token when toggling the visibility of an element (see #7406)
Correctly store the model in Dbafs::addResource() (see #7440)
Strip insert tags recursively in the strip_insert_tags() function
Add the encodeRequestString() method to the Environment class
Encode insert tags in the Input class
Add a missing change log entry
Fix a potential directory traversal vulnerability
Use Input::postUnsafeRaw() to hash and compare passwords
Do not use the translated labels in the exception message
Store the unfiltered SMTP password
Merge branch 'hotfix/security-fixes' into hotfix/3.2.16

Conflicts:
	system/docs/CHANGELOG.md
Update the language files
Bump the version number
Merge branch 'hotfix/3.2.16' into support/3.2