Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Download tar.gz
11.86 KB
MD5: 4f2be0fd0669c84666459fa53bb40540
SHA-1: 9ad38fdf789fce0e3cd6ada7c5103e04bc15791e
SHA-256: 4b2366def72a39ec88249750f4077aff420e9027aca75c7c85b4550be7acb2d6
Download zip
12.78 KB
MD5: c71aebf37a33bc134b2749d2a439f2cf
SHA-1: 363e8a21a3683fef1a801031c9c1713cba83a22e
SHA-256: f79405627e04e26aceead733afd31bfa7d3526fa30668f6aaff099a40f4e4420
Release notes
The 1.10 release of Node Reference URL Widget corrects an XSS security hole. All previous versions of Node Reference URL Widget would not sanitize the node title when displaying the referenced node. Upgrading is recommended for all users.
See SA-CONTRIB-2011-018 - Node Reference URL Widget - Cross Site Scripting