It seems this module does not implement the security checks recommended in http://drupal.org/node/28984

Comments

drewish’s picture

i appreciate the tip, and i'll look into it but maybe you'd like to point out some specific places...

drewish’s picture

i added a couple of check_plain()s to try to lock it down... i'd love to have some help with a review though...

drewish’s picture

Status: Active » Fixed
Anonymous’s picture

Status: Fixed » Closed (fixed)