Previous HEAD position was 61bd51732 Merge branch 'master' into 1.0
HEAD is now at 67ac20568 [FIX] BASE: Prevent path traversal and directory access in protected_media.Use Django safe_join() for MEDIA_ROOT + path to block traversal. Serve only files (reject directories) via os.path.isfile() check
Resolved commit: 67ac2056813ee95d4c4a0bfe7c0124a361cb6c48