3.2.5

Fixed

• Correctly load the parent pages in the navigation modules (see #6696).
• Correctly encode URLs with GET parameters in the syndication links (see #6683).
• Do not pass POST data to the deserialize() function, so it is not vulnerable to PHP object injection. Thanks to Pedro Ribeiro for his input (see #6695).
• Allow any character in passwords, especially the less-than symbol (see #6447).
• Purge the image cache if a file is being renamed (see #6641).
• Preserve tags in custom CSS definitions (see #6667).
• Make the swipe CSS selectors more specific (see #6666).
• Correctly optimize floating-point numbers in style sheets (see #6674).