"Script loading strategies are now employed in core and bundled #themes to improve #performance of loading scripts with defer and async attributes. Additionally, scripts on the frontend and login screen are now constructed using script helper functions, making it possible to utilize Content Security Policy to harden against any XSS #vulnerabilities."