Headless Server now Sends Content-Disposition Header for Non-viewable Responses

For security reasons, HeadlessServer now sends a Content-Disposition HTTP header of type "attachment" with filename="api.json" for all requests to the GraphQL endpoints.

(CMS-21766)

Third-Party Update: JSLT lib to Version 0.1.11 (was 0.1.8)

This is a drop in replacement maintenance update, containing non breaking bugfixes and new features only. For details please see original release notes at https://github.com/schibsted/jslt/releases

(CMS-21466)