Security:
- Fix XSS in Backoffice Message rendering
Fixes:
- Fix wrong pagination count for personal messages
- Fix Track QueryAet and thereby track API view for logged in users
- Fix allowed image types in Assembly import