Merge branch 'hotfix/3.3.6'
Encode insert tags in the Input class
Fix a potential directory traversal vulnerability
Use Input::postUnsafeRaw() to hash and compare passwords
Do not use the translated labels in the exception message
Store the unfiltered SMTP password
Merge branch 'hotfix/security-fixes' into hotfix/3.3.7

Conflicts:
	assets/contao/js/core.js
	contao/install.php
	system/docs/CHANGELOG.md
	system/modules/core/classes/Frontend.php
	system/modules/core/classes/Theme.php
	system/modules/core/library/Contao/Controller.php
	system/modules/core/modules/ModuleSearch.php
	system/modules/core/widgets/MetaWizard.php
Bump the version number
Merge branch 'hotfix/3.3.7'
Merge branch 'hotfix/security-fixes' into release/3.4.0

Conflicts:
	contao/install.php
	contao/password.php
	system/docs/CHANGELOG.md
	system/modules/core/classes/Theme.php
	system/modules/core/dca/tl_settings.php
	system/modules/core/library/Contao/Controller.php
	system/modules/core/library/Contao/User.php
	system/modules/core/modules/ModuleSearch.php
Merge branch 'hotfix/3.3.7' into release/3.4.0

Conflicts:
	assets/contao/js/core.js
	contao/install.php
	system/config/constants.php
	system/docs/CHANGELOG.md
	system/modules/repository/classes/RepositorySettings.php
Re-apply the password comparison fix to the install tool
Do not require to set a media query in the image sizes

See https://github.com/contao/core/commit/0809d5dfa9cc20454d1e7670bb0564b1c3979aec#commitcomment-8688276.
Consider image size IDs when overriding the default image size (see #7470)