Right now, allow_insecure_derivates can only be set for the entire site. Add a new config so that it can be enabled only for certain styles.
Needs work
11.0 🔥
The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
The previous 9.5.x patch is not applicable anymore after Drupal 9.5.8 release as ImageStyleDownloadController.php has been changed in this release. Adding new patch for 9.5.8+