fix(security): disable reading config params from URL search params (#7697)

Reading configuration parameters from URL search params 
is by default no longer enabled. To re-enable it, set queryConfigEnabled
configuration parameter to true.

Functionally, this is a breaking change, but given we're just providing
a security vulnerability patch we're considering this a PATCH version bump
only.

Refs #4872
Refs https://github.com/swagger-api/swagger-ui/security/advisories/GHSA-qrmm-w75w-3wpx

test/e2e-cypress/static/index.html

@@ -56,7 +56,8 @@
         } else {
           window.completeCount = 1
         }
-      }
+      },
+      queryConfigEnabled: true,
     })
 
     window.ui = ui

test/e2e-cypress/static/pages/5138/index.html

@@ -65,7 +65,8 @@
           } else {
             window.completeCount = 1
           }
-        }
+        },
+        queryConfigEnabled: true,
       })
 
       window.ui = ui