warning on action confirmation page

looks like check_plain() is run on the #value of hidden form elements:

http://api.drupal.org/api/function/theme_hidden/5

since our value may be other than a simple textfield/string, we run the risk of passing an array through here when using checkboxes or dropdowns or whatever.

i assume we are 'forced' to use hidden values in order to pass our settings through to the confirm page. but isn't there a multistep form way of handling this cleanly?

update, configureable action must include a non text input value (like checkboxes) to see this problem. it only occurs when the incoming data is an array instead of a scalar.

Any configurable action whose form contains checkboxes should generate this error.

In my case, it's some custom actions that won't apply to anyone else.

You could reproduce this by creating a bogus action that doesn't do anything but that submits a form.

the problem stems from the fact that we try to loop through the action config form and store each value as a hidden var. this is ok most of the time, but if you have 'complex'/nested forms, it breaks.

i'm testing a fix now which simply serializes and stores it in a single hidden var which can be unserialized after confirm page.

this should be working in head. changed the way action form elements are saved in the confirmation page.