Downloads

Download tar.gz 7.51 KB
MD5: cf6fbeb1e2284887f0262a7399a7d4c6
SHA-1: 338e13f888461e0874ec35936ab3e64d0da3a9a6
SHA-256: 4b68f3cb78e34605120277d2cd65ad7fd37843b268b28bda6cddebe631f6b3f6
Download zip 8.36 KB
MD5: 0f4c41e87410b91b2756f01e6639f644
SHA-1: 6f6644319830cb6a3e04e7becbd752fce3eee287
SHA-256: 08b0f9e803ce8c76ff98c74be609abe7b2aab79961cdfbb70021db491d21af76

Release notes

This release includes a fix for a cross-site scripting (XSS) vulnerability in which JavaScript could be inserted in the title of the Recent Comments block via a custom block title interface. This custom title interface has been removed, as Drupal 5.x and later allow overriding the a block's title from its configuration screen.

Created by: todd nienkerk
Created on: 18 Jan 2010 at 22:21 UTC
Last updated: 20 Jan 2010 at 18:54 UTC
Security update
Unsupported

Other releases