Applied to 6.x with http://drupal.org/node/280571

Needs a re-roll for 7.x

CommentFileSizeAuthor
#5 openid-D7.patch2.83 KBswentel
#2 openid.patch2.83 KBswentel
#1 openid_xss_6x.patch1.08 KBpwolanin
openid.patch2.46 KBcatch

Comments

pwolanin’s picture

pwolanin commented
StatusFileSize
new openid_xss_6x.patch1.08 KB

also need to combine the check_plain patch (attached)

note, these were part of SA-2008-044 for D6

swentel’s picture

swentel commented
Status: Needs work » Needs review
StatusFileSize
new openid.patch2.83 KB

Merged both patches in one.

Status: Needs review » Needs work

The last submitted patch failed testing.

lilou’s picture

lilou commented
Status: Needs work » Needs review

See: #335122: Test clean HEAD after every commit and http://pastebin.ca/1258476

swentel’s picture

swentel commented
StatusFileSize
new openid-D7.patch2.83 KB

Go testbot!

catch’s picture

catch
he/him
Primary language English
commented
Status: Needs review » Reviewed & tested by the community

This was in a security release, so we should get it in sooner rather than later (i.e. please overlook the lack of dbtng conversion - that could go in it's own issue).

dries’s picture

dries commented
Status: Reviewed & tested by the community » Fixed

Committed to CVS HEAD. Thanks.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.