Downloads
Download tar.gz
7.51 KB
MD5: cf6fbeb1e2284887f0262a7399a7d4c6
SHA-1: 338e13f888461e0874ec35936ab3e64d0da3a9a6
SHA-256: 4b68f3cb78e34605120277d2cd65ad7fd37843b268b28bda6cddebe631f6b3f6
Download zip
8.36 KB
MD5: 0f4c41e87410b91b2756f01e6639f644
SHA-1: 6f6644319830cb6a3e04e7becbd752fce3eee287
SHA-256: 08b0f9e803ce8c76ff98c74be609abe7b2aab79961cdfbb70021db491d21af76
Release notes
This release includes a fix for a cross-site scripting (XSS) vulnerability in which JavaScript could be inserted in the title of the Recent Comments block via a custom block title interface. This custom title interface has been removed, as Drupal 5.x and later allow overriding the a block's title from its configuration screen.