Complete FTP

- Add support for decrypting AEAD-encrypted PGP messages (RFC 9580) (Enterprise MFT). - Harden process-trigger macro substitution against command injection. Values such as %FileName% that are substituted into Batch, PowerShell or FTP-script triggers now have characters that are special to the target interpreter replaced with an underscore. Macro values are also exposed to Batch and PowerShell scripts as environment variables (!FileName! / ${env:FileName}), which is the recommended, safe way to reference them. Upgrade note: existing Batch/PowerShell/FTP-script triggers that reference values such as file names via the old %Macro% form may now see characters in those values replaced with underscores. Switch to the environment-variable form to use the original value. See Using macro values safely. - Set SameSite=Lax on the HTTP session cookie to further protect against cross-site request forgery. - Add an onFolderChanging customization hook to FileManager 4, allowing a site to veto or defer a directory change. - Fix a null-reference error that could occur in CompleteFTP Manager when a configuration save failed. - Require HTTP POST for JSS published-function (RPC) calls, to prevent cross-site request forgery. - Update moduli file for Diffie-Helman groups.