revert PR #3009 changes to just disabling path escaping by default in…

… static methods/middleware (#3016)

revert PR #3009 changes to just disabling path escaping by default in static methods/middleware (#3016)

Merge pull request #3020 from aldas/v4_v4-15-4_changelog

Changelog for v4.15.4 - security fix

Changelog for v5.1.1 (#2965)

Merge pull request #2963 from aldas/v4_changelog_4_15_2

Changelog for v4.15.2

Changelog for v5.1.0

Merge pull request #2905 from aldas/v4_crsf_token_fallback

CSRF: support older token-based CSRF protection handler that want to render token into template

Add changelog for v5.0.4 release

Merge pull request #2891 from aldas/fix_staticmw

Fix directory traversal vulnerability under Windows in Static middleware when default Echo filesystem is used. Reported by @shblue21.

This applies to cases when:
- Windows is used as OS
- `middleware.StaticConfig.Filesystem` is `nil` (default)
- `echo.Filesystem` is has not been set explicitly (default)

Exposure is restricted to the active process working directory and its subfolders.