Security update

• Changes related to rest routes authentication.

• Changes related to rest routes authentication.

This release contains a fix for XSS vulnerability in data-* attributes:
https://security.drupal.org/node/183076

Run module update with composer option -W (--with-all-dependencies), because there is a new added dependency DOM Purify.
composer update drupal/glightbox -W

Fixed issues #183322 and #183329

• Fix security issue involving XSS, Mitigated by need to have admin access
• Issue #3522883 by danrod, joachim: Link to the settings form in the error message 'Try accessing the EU Cookie Compliance settings page and re-save the form.'
• Issue #3489452 by svenryen: With PHP 7, eu_cookie_compliance.libraries.yml causes Drupal to crash
• Issue #3404608 by ankondrat4, svenryen: Incorrect user's IP address when uses more than one proxy server
• Issue #3474433: Update logo for compatibility with Project Browser

• Restrict administer simple klaro permission
• Sanitize data-href on anchor elements

Adding Access Checks for Booking Contact & Updated default view config for booking contacts.

Fix order state

https://security.drupal.org/node/183303