Issue #2349651 by larowlan, yannisc: Fixed Default contact form does not send email as email recipient is not set during the installation.
Issue #1956698 by Gábor Hojtsy, xjm, alexpott, damiankloip, mgifford: Prevent access to YAML files using .htaccess and web.config.