Deprecation Removal: UrlProvider Leftovers from lc-cae

Since link building for commerce URLs has already been moved to the commerce adapters, the UrlProviders in the lc-cae extension for commerce urls shouldn't be used anymore and were deprecated previously.

Follow Section, “Deprecation Removal: UrlProvider Leftovers from lc-cae” for upgrade information.

(CMS-21736)

Freemarker Macro {{<@cm.message />}} Escapes Output by Default

While the output of the Freemarker function ${cm.getMessage() } is escaped by Freemarker, the same functionallity as Freemarcer macro <@cm.message /> was not. For security reasons we changed it, so both are escaped now by default. This is important if you add unchecked user input values into the message strings, like for example in search result headers.

Follow Section, “Freemarker Macro {{<@cm.message />}} Escapes Output by Default” for upgrade information.

(CMS-21409)