Stefan Bürk

The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests. This forged state is persisted into the shared rootline cache, which allows anonymous visitors to bypass `extendToSubpages`-inherited access restrictions on cached pages.

Changing backend users passwords through the user settings module causes the cleartext password to be stored in the `uc` and `user settings` fields of the `be users` database table.