Merge branch 'hotifx/2.0.3'
Starting 2.0.4 hotfix branch
Security fixes

See https://contao.org/en/news/major-security-hole-found-in-contao.html
Clarified Payone merchant id label
Set multiple=true for fileTree with checkbox field (#990)
Fixed order field not storing binary values (#993)
Fixed downloads attribute (#993)
Fixed description of list module field (#989)
Exception when using shipping weight as variant attribute (#940)
Missing user instance in back end overview (#998)
Transifex sync
Labels for reports module were not translateable through transifex (#1001)
CS
CS
Fix issue with shiping modules (#960)
Orders were not filterable in the backend (#973)
Use unserialize instead of deserialize because of objects (#991)
Merge branch 'hotfix/2.0.4' into develop