- `blob:` urls not being allowed by connect-src CSP
- Mastodon API: fix `GET /api/v1/notifications` not returning the full result set
- Rich Media Previews for Twitter links
+- Fix CSP policy generation to include remote Captcha services
## [Unreleased (patch)]