- Added some XSS protection
- Improved handling of Tin Can interactions with longer descriptions
- Improved input validation in courses API
- Include full externalConfig for cmi5 launch and fetch
- Fixed a bug with using the "en-US" culture code when learner's browser is set to a non-English language. Only affected the Java version of Engine.