Bump handlebars from 4.7.2 to 4.7.3

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.7.2 to 4.7.3.
- [Release notes](https://github.com/wycats/handlebars.js/releases)
- [Changelog](https://github.com/wycats/handlebars.js/blob/master/release-notes.md)
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.7.2...v4.7.3

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Bump @nextcloud/vue from 1.3.0 to 1.3.1

Bumps [@nextcloud/vue](https://github.com/nextcloud/nextcloud-vue) from 1.3.0 to 1.3.1.
- [Release notes](https://github.com/nextcloud/nextcloud-vue/releases)
- [Commits](https://github.com/nextcloud/nextcloud-vue/compare/v1.3.0...v1.3.1

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Bump dompurify from 2.0.7 to 2.0.8

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.0.7 to 2.0.8.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.0.7...2.0.8

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Bump eslint-plugin-import from 2.20.0 to 2.20.1

Bumps [eslint-plugin-import](https://github.com/benmosher/eslint-plugin-import) from 2.20.0 to 2.20.1.
- [Release notes](https://github.com/benmosher/eslint-plugin-import/releases)
- [Changelog](https://github.com/benmosher/eslint-plugin-import/blob/master/CHANGELOG.md)
- [Commits](https://github.com/benmosher/eslint-plugin-import/compare/v2.20.0...v2.20.1

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Add featured category

Prevent archieved download on secure view

Add webpack-based js tests

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Signed-off-by: Joas Schilling <coding@schilljs.com>

Signed-off-by: Mario Danic <mario@lovelyhq.com>

Signed-off-by: Mario Danic <mario@lovelyhq.com>

No more jQuery

Bump symfony to 4.4.4

Removed nested call to beforeunload

Disable link shares of disabled users

Fixes #10869

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Array access on int will fail on php7.4

Fetch a new request token as soon as the browser becomes online

Set up a security policy

Signed-off-by: Joas Schilling <coding@schilljs.com>

Only send samesite cookies

Issue 18866

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix event type

Fix occ maintenance:install database connect failure

This makes the last remaining two cookies lax. The session cookie
itself. And the session password as well (on php 7.3 that is). Samesite
cookies are the best cookies!

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Signed-off-by: Joas Schilling <coding@schilljs.com>

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

do not overwrite global user auth credentials with empty values

Use escape-html in collaboration.js