CSP violations fixed; binary bodies no longer recorded in session replay

1.391.3

Patch Changes

• #3909 ab4a220 Thanks @marandaneto! - Avoid style-src-attr CSP violations when diffing rrweb style mutations. (2026-06-22)

• #3912 78ac40c Thanks @pauldambra! - Session replay network capture: never record binary/asset response or request bodies (image, video, audio, font, octet-stream, pdf, zip, wasm) even when recordBody is enabled - they bloat recordings, duplicate what the replay already shows, and the body is no longer read. (2026-06-22)