Anonymous visitors no longer receive a LifterLMS session cookie until session data is actually written (an applied coupon, a queued notice, etc.), so otherwise-anonymous page views stay eligible for full-page caching instead of being skipped by the page cache. #3210
Security Fixes
Additional checks in the course builder when associating protected media.
Improved validation of submitted filenames in the admin table export workflow.
Additional checks on lesson progression form submissions.
