Security fixes

See https://contao.org/en/news/major-security-hole-found-in-contao.html