Merge pull request apostrophecms#495 from apostrophecms/pro-2076

PRO-2076 no script tag bodies allowed at all when locking down to certain script sources

Bumps version number (apostrophecms#493)

Merge pull request apostrophecms#473 from jbdemonte/main

update README regarding TypeScript (apostrophecms#420)

2.3.3: security: block schemes with the characters -, + and . where a…

…ppropriate, i.e. when not in allowedSchemes and the like

changelog credit

Fleshes out changelog message

bumps the version number (apostrophecms#446)

Updates version and changelog (apostrophecms#440)

Updates for 2.1.1 (apostrophecms#436)

* Updates version and changelog

* Updates mocha