commons 7.x-3.1

Please see the Acquia documentation site for the latest Commons release notes.

The following security updates are included in Commons 3.1:

SA-CONTRIB-2013-039 - Commons Wikis - Access bypass & Privilege escalation
SA-CONTRIB-2013-038 - Commons Groups - Access bypass & Privilege
SA-CONTRIB-2013-037 - Rules - Cross Site Scripting (XSS)
SA-CONTRIB-2013-035 - Views - Cross Site Scripting (XSS)

Commons Profile:

Changes since 02-25-2013:

• Update to latest stable version of Rules.
• #1954778 by ezra-g: Update Views module to 3.6 .
• Update to Metatag beta5, og 2.1, votingapi 2.11
• #1941458 by japerry: remove the organizers og_role rename from the installer.
• #1812646 by Agileware: Notice: Undefined index: radioactivity_timestamp() on node/add/group.
• #1946940 by Zarabadoo, japerry: Fix typo in color palette selection during install
• Remove unnecessary 'branch' parameter per Killes in IRC troubleshooting broken dev snapshot build.
• Followup to Issue #1945944 by ezra-g: Include patch to TimeAgo for redundant drupal_add_js() call.
• Move the commons default footer title from the body to the title of the block.
• Arbitrary commit per Killes in IRC: Attempting to restart the nightly dev snapshot packaging.
• Update title module to alpha 6
• #1945942 by ezra-g: Fixed Redundant call to drupal_add_js() when Libraries module is enabled.
• #1945888 by ezra-g: Update Libraries API to 2.1.
• #1790734: Radioactivity module needs the download component added to the make file
• Allow reset of git repos before a pull
• #1908812 by japerry: Increment the patch to 17 so it includes the dev version of the theme
• Technical structuring for voting api so the version number doesn't show up in our dev make patch
• Update hash of Quicktabs module per Issue #1941824 by ezra-g, Zarabadoo, : Fixed Content tabs on the group landing page are being escaped.
• Update to latest commons-dev patch per #1908812.
• Pin AdaptiveTheme to specific version per issue #1940116: AdaptiveTheme errors on fresh install.
• #1940094 by ezra-g: Fixed Ctools downloaded to '2.1' subdirectory.
• #1940082 by ezra-g: Update core to 7.21.
• Followup to Issue #1927204 by japerry: Use releases or specific hashes instead of dev versions of other contrib modules.
• #1910874 by ezra-g, japerry: Fixed Anonymous users are able to create content (Beta=>3.x stable upgrades only).
• #1932530 by japerry: Add entity patch to allow language_none content to still be visible when locale is enabled.
• #1927204 by japerry: Use releases or specific hashes instead of dev versions of other contrib modules.
• #1035486 by japerry, specify an int comparison when grabbing the max execution time
• #1929180: Add max_execution_time=0 as an excluded variable to set during install.
• #1035486: up the max_execution_time limit from 60 to 120 for slower machines
• Change the administrator role in OG to say Organizers
• Update the commons-dev make file to use the patch from 1908812 #10 after 3.0 release

commons_activity_streams:

Changes since 02-25-2013:

• #1942194 by jhedstrom: Fixed Fatal error: Class 'panels_display()' not found.

commons_q_a:

Changes since 02-25-2013:

• #1921502 by Zarabadoo: Add a wrapper to the vote up-down widget.
• #1921502 Remove unused images.
• #1921502 by Zarabadoo: Crossbrowser type spacing fixes.
• #1940644 by japerry, ezra-g: Fixed Vote sum not displayed until page is refreshed.
• #1921502 by Zarabadoo: Restyle the rating widget to use all css and be more flexible with font-size changes.
• Make development easier by Zarabadoo: Allow environmental arguments when compass is processing css.
• #1940644 by japerry, set the default Q/A widget to average instead of user vote.
• #1940644: remove the $info variable, which will only show a vote score if you voted
• #1936444 by japerry: Change Create question to 'Ask a question' on node create form

commons_utility_links:

Changes since 02-25-2013:

• #1936618 by jpontani: add signup and login links to utility links

commons_groups:

Changes since 02-25-2013:

• #1954472: Give group owners the organizer role
• #1941458 by japerry: check only to see if the title was administrator member and change it to organizers. If its anything else then it was changed manually and we shouldn't do anything.
• #1941458 by Zarabadoo: Change the term "administrator member" to "Organizers" on the Group contributors block.
• #1821808: Change contributor view block titles to match the interactive prototype
• #1947130 by japerry: check all vowels before using a/an for a create node title.
• remove auto anonymous group add
• #1940150: reverting the organizers role in support of theming views to display the labels instead
• #1936642 by japerry, ezra-g: Add placeholder for group directory, add update script for reverting the groups features
• #1936642: add description to og_group references
• Followup to Issue #1936714 by ezra-g: Fixed Authenticated users should have permission to create a group.
• #1936714 by ezra-g: Fixed Authenticated users should have permission to create a group.
• #1910874 by ezra-g, japerry: Fixed Anonymous users are able to create content (Beta=>3.x stable upgrades only).
• #1936446 by ezra-g: Fixed Group content visibility field not added to OG-enabled content types after enabled Commons Groups Privacy.
• Revert and resolve merge conflict.
• #1927422 by brantwynn: Fixed Disabling default OG notifications causes Strict warnings when other modules use hook_default_rules_config().
• #1927704 by japerry: remove ajax from groups view, because it breaks firefox and isn't really needed.
• Two issues, make sure the creator of the group is an organizer, and Issue #1910874: make sure anonymous users cannot post content if they aren't allowed to
• Change the contributors view to include members and organizers in the group block

commons_wikis:

Changes since 02-25-2013:

• wiki user access

commons_content_moderation:

Changes since 02-25-2013:

• Remove error message that appears in VBO when not using the content_moderation action on a view form

commons_search:

Changes since 02-25-2013:

• by jpontani: remove unnecessary template file
• #1936628 by jpontani: commons_origins now has option for custom search title
• #1944412 by jpontani: add second core search page variant to only have 1 column on empty search; and current variant when a search has taken place
• #1944412 by jpontani: change solr page to display facets in configured regions
• by jpontani: if Acquia Search is enabled later, we need to force create facets upon enable

commons_wysiwyg:

Changes since 02-25-2013:

• #1949552 by japerry: Remove the filter tips fieldset if the user is only using the filtered_html filter.
• #1948466 by Zarabadoo, ezra-g: Fixed The wysiwyg toolbar on Filtered HTML text format gets cut off on small screens.

commons_events:

Changes since 02-25-2013:

• #1950204: Add the event_datetime formatter to event views from long. (and update script)
• #1950204 by japerry: Create a custom start-end date formatter to display dates prettier
• User experience by Zarabadoo: Make the labels on on event date widgets more meaningful and remove redundant description text.
• #1936628 by jpontani: commons_origins now has option for custom search title
• by jpontani: typo in previous commit for #1944752
• #1947132 by jpontani: always show offsite URL field
• Add a t() and fix typos in the event_solr module
• #1944752 by jfhovinne: cancel attendance wasn't showing up for non-admins
• #1947126 by japerry: Display a helpful message upon creation of new events that they might not appear immediately if you're using solr.
• #1947128 by jpontani: removes Attendees tab
• by jpontani: move the modules_enabled hook to commons_search_core for enabling facets for Acquia Search
• #1936644 by jpontani: remove username field from Organizer view
• Revert Issue #1936644 by japerry, change Organizers to administrator members. We'll theme the labels to match correctly in views
• #1936630 by jpontani: add logo, date and address to event teaser display
• #1936644 by jpontani: add Organizers field to events; add new Organizers view and put in Events panelizer config
• Issues #1936628 and #1929966: add date sort criteria for event listing via views; override search-results template file with new one to allow changing of 'search results' title
• Issues #1936650 and #1934336: attendee view and event logo should use 50x50 image style; add event creator as attendee on initial creation
• Bugfix by Zarabadoo: Check there is data in the argument before operating on it.
• #1934336 by jpontani: remove dsm; apply 50x50 style to event logo
• #1917310 by jpontani: undefined index when using locale module, due to unsetting form fields from the form array

commons_misc:

Changes since 02-25-2013:

• #1932160 by japerry: add a check to filter out the color palette when on the general settings page