[1.4.1]
Update keila to 0.40.1
Full Changelog
Fixed several stored cross-site scripting vulnerabilities in forms and campaigns
HMAC signatures of unsubscribe, double opt-in, and tracking links are now compared in constant time
New error pages for 404 and 500 errors
Links in email previews now open in a new tab instead of navigating the preview
Requests for missing entities (e.g. campaigns, contacts, forms) or user-facing links (e.g. unsubscribe or double opt-in links with incorrect IDs or invalid signatures) now show the 404 page instead of an internal server error