Fixes:

• Security fix to prevent XSS injections in demo pages
• Security fix to prevent reading file urls

What's Changed

• docs: update release process to use pull requests by @simonseyock in #1100
• fix: remove unneeded global statement by @simonseyock in #1101
• Security fixes by @simonseyock in #1102

Full Changelog: 4.0.1...4.0.2