fix(security): add csrf filter + prevent xss attacks by escaping user input

- update CI4 to v4.1.9's stable production package
- update php and js dependencies to latest

modules/Install/Controllers/InstallController.php

@@ -356,6 +356,7 @@ class InstallController extends Controller
                         $replaced = true;
                         return $keyVal;
                     }
+
                     return $line;
                 },
                 $envData